Commits - rpms/openssh - CentOS Git server

Fix Release spec to include hyperscale_rel

Raymond Colebaugh • 4 days ago

1b75bf

Merge webauthn patch to c10s-sig-hyperscale

Ben Homer • 5 days ago

ebf6e1

Apply fb patches and update the spec

Vishal Mishra • 3 months ago

7bfe72

Bump release for October 2024 mass rebuild:

Troy Dawson • 4 months ago

84c093

Fix MLKEM for BE platforms

Dmitry Belyavskiy • 4 months ago

15a324

Provide details on crypto error instead of "error in libcrypto"

Dmitry Belyavskiy • 4 months ago

6ec986

Extra help information should not be printed if stderr is not a TTY

Dmitry Belyavskiy • 4 months ago

ebb51c

Add extra help information on ssh early failure

Dmitry Belyavskiy • 4 months ago

84ad70

Resolve memory management issues after rebase

Dmitry Belyavskiy • 4 months ago

ebf2d5

Gssapi-keyex: fix issues found by static analysis

Zoltan Fridrich • 4 months ago

384feb

Use FIPS KEX defaults in FIPS mode

Dmitry Belyavskiy • 4 months ago

080236

Separate ssh-keysign to a dedicated package

Dmitry Belyavskiy • 4 months ago

2a4f84

Update to OpenSSH 9.9p1

Dmitry Belyavskiy • 4 months ago

07172f

Rebuilt

Dmitry Belyavskiy • 5 months ago

d84f5f

Remove redundant patches

Dmitry Belyavskiy • 6 months ago

01503b

"publickey-hostbound@openssh.com" extension makes no sense with GSS

Dmitry Belyavskiy • 6 months ago

262bb3

Merge patches from gsskex regressions

Zoltan Fridrich • 6 months ago

5c3160

Add missing gsskeyex authentication method

Zoltan Fridrich • 6 months ago

fc550b

Restore GSS connectivity when no hostkeys are present

Dmitry Belyavskiy • 6 months ago

78bb33

Remove obsoleted patches

Dmitry Belyavskiy • 6 months ago

303ff5

Address SAST scan issues

Dmitry Belyavskiy • 6 months ago

dd7a5a

remove tests directory

Miluse Bezo Konecna • 6 months ago

acc181

Reenabling self-test on rpm build

Dmitry Belyavskiy • 6 months ago

ba8197

sshd doesn't propose to enter password again when a non-existing user is specified

Dmitry Belyavskiy • 6 months ago

ce2e80

Fix gating.yaml

Miluse Bezo Konecna • 7 months ago

a26f24

gating CI - fix in plans

Miluse Bezo Konecna • 7 months ago

3d59a1

Use FIPS-compatible API for key derivation RHEL-10

Dmitry Belyavskiy • 7 months ago

f1bd13

Change ssh-keygen defaults in FIPS mode

Dmitry Belyavskiy • 7 months ago

1c01ac

Temporary disabling self-test

Dmitry Belyavskiy • 7 months ago

7a3577

Rebase OpenSSH to 9.8p1

Dmitry Belyavskiy • 7 months ago

089d79

add gating for RHEL-10

Miluse Bezo Konecna • 7 months ago

919508

Remove pam_ssh_agent_auth subpackage

Zoltan Fridrich • 7 months ago

2231e3

Build OpenSSH without ENGINE API

Zoltan Fridrich • 7 months ago

0f2df3

Bump release for June 2024 mass rebuild

Troy Dawson • 8 months ago

8f0ad5

Make default key sizes configurable in sshd-keygen

Zoltan Fridrich • 9 months ago

d23ed3

Correctly audit hostname and IP address

Zoltan Fridrich • 9 months ago

2e80dd

Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

Fedora Release Engineering • a year ago

2f41ca

Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

Fedora Release Engineering • a year ago

d089d5

Applying patches to rebase to OpenSSH 9.6p1

Dmitry Belyavskiy • a year ago

f23830

Fix type errors in downstream gssapi-keyex patch

Florian Weimer • a year ago

87ae5d

Fix issue with read-only ssh buffer during gssapi key exchange

Mattias Ellert • a year ago

5c1da7

Fix FTBFS due to implicit declarations (rhbz#2241211)

Mattias Ellert • a year ago

4f07bf

migrated to SPDX license

Dmitry Belyavskiy • a year ago

d3cd3f

Revert "Remove sshd.socket unit"

Timothée Ravier • a year ago

f98acb

pkcs11: Add support for 'serial' in PKCS#11 URI

Jakub Jelen • 2 years ago

d77b1b

Minor optimization of ssh_krb5_kuserok

Dmitry Belyavskiy • 2 years ago

c7af8e

Remove sshd.socket unit

Dmitry Belyavskiy • 2 years ago

8a2943

Disable forking of ssh-agent on startup

Dmitry Belyavskiy • 2 years ago

f4f594

Split including crypto-policies to a separate config

Dmitry Belyavskiy • 2 years ago

ec2f61

relax checks of the OpenSSL version

Dmitry Belyavskiy • 2 years ago

147ab2

relax checks of the OpenSSL version

Dmitry Belyavskiy • 2 years ago

eb1b5e

Update gssapi-keyex patch for OpenSSH 9.0+

Mattias Ellert • 2 years ago

c04e46

Fix remote code execution in ssh-agent PKCS#11 support

Dmitry Belyavskiy • 2 years ago

c3494f

Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Fedora Release Engineering • 2 years ago

9fd130

Revert "pkcs11: Add support for 'serial' in PKCS#11 URI"

Norbert Pocs • 2 years ago

8f5b8f

Merge gssapi-keyex and gssapi-auth

Norbert Pocs • 2 years ago

c5082a

Merge manpage crypto-policies related patches

Norbert Pocs • 2 years ago

2b67ec

Merge evp related patches

Norbert Pocs • 2 years ago

fb40f0

Remove deprecated usage of %patchN

Norbert Pocs • 2 years ago

141d7b

Updating specfile

Dmitry Belyavskiy • 2 years ago

d5fd07

Fix DSS verification problem

Dmitry Belyavskiy • 2 years ago

18e9f3

Remove unused patch

Dmitry Belyavskiy • 2 years ago

29083a

Rebasing OpenSSH from 9.0 to 9.3

Dmitry Belyavskiy • 2 years ago

f561c6

Clarify HostKeyAlgorithms option on man page

Norbert Pocs • 2 years ago

b129d6

pkcs11: Add support for 'serial' in PKCS#11 URI

Jakub Jelen • 2 years ago

e39f11

Fix regression in pkcs11 introduced in the previous patch

Norbert Pocs • 2 years ago

e8e01d

Fix minor issues with openssh-9.0p1-evp-fips-dh.patch

Norbert Pocs • 2 years ago

2341f1

Audit logging patch was not applied

Dmitry Belyavskiy • 2 years ago

6f7c76

If SHA1 signatures are not permitted, try to fallback to SHA2

Dmitry Belyavskiy • 2 years ago

1506e0

Make the sign, dh, ecdh processes FIPS compliant

Norbert Pocs • 2 years ago

b63272

Fix self-DoS

Dmitry Belyavskiy • 2 years ago

745da7

C99 compatiblity fixes

Florian Weimer • 2 years ago

d5591f

Make sshd & sshd@ units want ssh-host-keys-migration.service

Timothée Ravier • 2 years ago

e3597c

Add sk-dummy subpackage for test purposes

Zoltan Fridrich • 2 years ago

3a98e6

Make ssh-host key migration less conditional

Dusty Mabe • 2 years ago

21fd6b

Mark /var/lib/.ssh-host-keys-migration as %ghost file

Dusty Mabe • 2 years ago

1076e6

Use a service unit to strip ssh_keys group from host keys (rhbz#2172956)

Dusty Mabe • 2 years ago

08d842

update date in changelog entry

Dusty Mabe • 2 years ago

937ee4

We dont install openssh.conf file

Dmitry Belyavskiy • 2 years ago

450286

Get rid of ssh_keys group for new installations

Dmitry Belyavskiy • 2 years ago

7a2155

Restore upstream default host key permissions (rhbz#2141272)

Dmitry Belyavskiy • 2 years ago

b61536

Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

Fedora Release Engineering • 2 years ago

cc56e8

Fix build against updated OpenSSL

Dmitry Belyavskiy • 2 years ago

c9904c

Add additional audit loggin

Norbert Pocs • 2 years ago

ebc2a7

Check IP opts length

Dmitry Belyavskiy • 2 years ago

f79c12

bump release after rebase

Anthony Rabbito • 2 years ago

09b309

fix: source order

Anthony Rabbito • 2 years ago

499c2e

fix(ssh-agent): remove the socket in ExecStartPre

Anthony Rabbito • 2 years ago

11b870

openssh-clients: create a user socket unit for ssh-agent (rhbz#2125576)

Anthony Rabbito • 2 years ago

941789

RSAMinSize => RequiredRSASize

Dmitry Belyavskiy • 2 years ago

aa843e

openssh: move users/groups creation logic to sysusers.d fragments

Luca BRUNO • 2 years ago

26c275

Mark HostbasedAcceptedAlgorithms as governed by crypto-policies

Alexander Sosedkin • 2 years ago

42b22d

Port patches from CentOS - RSAMinSize

Dmitry Belyavskiy • 2 years ago

483723

OpenSSH Rebase to 9.0p1

Dmitry Belyavskiy • 2 years ago

03150f

Add patches from CentOS/RHEL9.1

Dmitry Belyavskiy • 2 years ago

9fd698

openssh: use allocated static GID for 'ssh_keys' group (rhbz#2104595)

Luca BRUNO • 2 years ago

14d7b8

Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

Fedora Release Engineering • 2 years ago

5b0725

Disable locale forwarding in OpenSSH

Dmitry Belyavskiy • 2 years ago

ae8256

Build gnome-ssh-askpass against gtk3

Cedric Staniewski • 2 years ago

95d45c

Update openssh.spec to allow flatpak builds

Jay W • 3 years ago

bffeef

- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

Fedora Release Engineering • 3 years ago

6c5dd8

Correct order of source files

Dmitry Belyavskiy • 3 years ago

4dc9d9

OpenSSH 8.8p1 rebase

Dmitry Belyavskiy • 3 years ago

7b76af

Upstream fix for CVE-2021-41617

Dmitry Belyavskiy • 3 years ago

c5e4c2

fixup! OpenSSH 8.7p1 patches rebase

Dmitry Belyavskiy • 3 years ago

72aea6

fixup! OpenSSH 8.7p1 patches rebase

Dmitry Belyavskiy • 3 years ago

640f24

Rebuilt with OpenSSL 3.0.0

Sahana Prasad • 3 years ago

4d585e

OpenSSH 8.7p1 patches rebase

Dmitry Belyavskiy • 3 years ago

8f4d19

spec and sources updated

Dmitry Belyavskiy • 3 years ago

b8319d

- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

Fedora Release Engineering • 3 years ago

bdde89

restore the blocking mode on standard output - upstream

Dmitry Belyavskiy • 3 years ago

d761d9

Use %set_build_flags to set build flags

Timm Bäder • 3 years ago

2f2c30

Missing version bump

Dmitry Belyavskiy • 3 years ago

5e2b7d

Hostbased ssh authentication fails if session ID contains a '/'

Dmitry Belyavskiy • 3 years ago

fddba5

restore the blocking mode on standard output

Dmitry Belyavskiy • 3 years ago

4d4feb

pam_auth version bump

Dmitry Belyavskiy • 3 years ago

ac2648

pam_auth version bump

Dmitry Belyavskiy • 3 years ago

f0f311

Fixes from RHEL 8.5.0

Dmitry Belyavskiy • 3 years ago

df2698

OpenSSH release update

Dmitry Belyavskiy • 3 years ago

f32b84

Remove all the coverity warnings

Dmitry Belyavskiy • 3 years ago

446f30

Fix coverity issues for openssh (#1938831)

Dmitry Belyavskiy • 3 years ago

a2e7f7

create userunit dir before installing to it

Rex Dieter • 3 years ago

44aae3

ssh-agent.serivce is user unit (#1761817#27)

Rex Dieter • 3 years ago

9979ff

-clients: provide ssh-agent.service (#1761817)

Rex Dieter • 3 years ago

5f230a

openssh-8.5p1-1 + 0.10.4-2

Jakub Jelen • 3 years ago

25c16c

Rebuilt for updated systemd-rpm-macros

Zbigniew Jędrzejewski-Szmek • 3 years ago

6e1851

- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

Fedora Release Engineering • 4 years ago

7347a7

8.4p1-5 + 0.10.4-1 (forgotten version bump)

Jakub Jelen • 4 years ago

ab05c4

8.4p1-5 + 0.10.4-1

Jakub Jelen • 4 years ago

106b28

Use /usr/share/empty.ssh instead of /var/empty/sshd

Timothée Ravier • 4 years ago

a88606

Remove openssh-cavs subpackage as it is no longer needed and broken anyway

Jakub Jelen • 4 years ago

1a45c5

Accept empty labels (#1919007)

Jakub Jelen • 4 years ago

ee6f0f

Fix malformed patch

Jakub Jelen • 4 years ago

557f72

8.4p1-4 + 0.10.4-1

Jakub Jelen • 4 years ago

258db0

Fix Obsoletes for openssh-ldap (#1902084)

Jakub Jelen • 4 years ago

d8a80c

Remove PasswordAuthentication yes from shipped configuration as it is already default and it might be hard to override

Jakub Jelen • 4 years ago

eced70

List updated RFC

Jakub Jelen • 4 years ago

b6df6b

8.4p1-3 + 0.10.4-1

Jakub Jelen • 4 years ago

126d27

Compatibility with Debian's openssh-7.4p1 (#1881301)

Jakub Jelen • 4 years ago

6a0769

Fix missing syscall in sandbox on arm (#1897712)

Jakub Jelen • 4 years ago

bbe3c2

8.4p1-2 + 0.10.4-1

Jakub Jelen • 4 years ago

a048fc

Drop misleading comment about crypto policies

Jakub Jelen • 4 years ago

914eb2

ssh-copy-id compatibility with ksh

Jakub Jelen • 4 years ago

62e762

Unbreak ssh-copy-id (#1884231)

Jakub Jelen • 4 years ago

dc5e31

Add missing changelog

Jakub Jelen • 4 years ago

7b064e

Remove the snap version, which is not used for build

Jakub Jelen • 4 years ago

527f79

8.4p1-1 + 0.10.4-1

Jakub Jelen • 4 years ago

bd3516

Rebase pam_ssh_agent_auth to 0.10.4

Jakub Jelen • 4 years ago

3783a5

Improve crypto policies mention in manual pages (#1881301)

Jakub Jelen • 4 years ago

9c8896

Remove support for building rescue CD

Jakub Jelen • 4 years ago

7e9d04

8.3p1-4 + 0.10.3-10

Jakub Jelen • 4 years ago

10cdec

Second iteration of sftp-server -m documentation (#1862504)

Jakub Jelen • 4 years ago

26c894

Remove openssh-ldap subpackage

Jakub Jelen • 4 years ago

441575

pkcs11: Do not crash with invalid paths in ssh-agent (#1868996)

Jakub Jelen • 4 years ago

4c85eb

Clarify documentation about sftp-server -m (#1862504)

Jakub Jelen • 4 years ago

77aa77

Use make macros

Jakub Jelen • 4 years ago

68460c

Drop loading of anaconda configuration from sysconfig including scriptlet to migrate to include drop-in directory

Jakub Jelen • 4 years ago

dfeecf

- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

Fedora Release Engineering • 4 years ago

fccd87

8.3p1-3 + 0.10.3-10

Jakub Jelen • 4 years ago

996e25

Move sshd_config include before any other definitions (#1824913)

Jakub Jelen • 4 years ago

653d07

Do not lose PIN when more slots match PKCS#11 URI (#1843372)

Jakub Jelen • 4 years ago

ed59cb

Stop loading crypto policy for command line in service files

Jakub Jelen • 4 years ago

868439

Move included configuration files in order to allow applications to include their defaults

Jakub Jelen • 4 years ago

8b7ddf

8.3p1-2 + 0.10.3-10

Jakub Jelen • 4 years ago

3bd5ce

Avoid crash on cleanup

Jakub Jelen • 4 years ago

7f87bd

8.3p1-1 + 0.10.3-10

Jakub Jelen • 4 years ago

5cd955

Unbreak corner cases of sshd_config include

Jakub Jelen • 4 years ago

efd1b7

Fix order of GSSAPI key exchange methods

Jakub Jelen • 4 years ago

169fdb

openssh-8.2p1-3 + 0.10.3-9

Jakub Jelen • 4 years ago

4e3553

Clarify crypto policies documentation in manual pages

Jakub Jelen • 4 years ago

a84805

Drop fipscheck dependency and non-standard fips checks

Jakub Jelen • 4 years ago

eb546e

Do not break X11 forwarding without IPv6

Jakub Jelen • 4 years ago

02af5c

Enable SHA2-based GSSAPI key exchange algorithms by default (#1666781)

Jakub Jelen • 4 years ago

1cc7c8

Print FIPS mode initialized in debug mode after the configuration is processed

Jakub Jelen • 4 years ago

fbd5f1

Restore gssapi-canohost.patch (#1749862)

Jakub Jelen • 4 years ago

57ba1b

Simplify references to crypto policies in configuration files (#1812854)

Jakub Jelen • 4 years ago

3e611d

openssh-8.2p1-2 + 0.10.3-9

Jakub Jelen • 4 years ago

b24175

Build properly with integrated u2f support (#1803948)

Jakub Jelen • 4 years ago

82f942

openssh-8.2p1-1 + 0.10.3-9

Jakub Jelen • 4 years ago

51f5c1

Do not write information about FIPS mode to stderr (#1778224)

Jakub Jelen • 4 years ago

ee9cb0

Correctly report invalid key permissions (#1801459)

Jakub Jelen • 4 years ago

2b86ac

openssh-8.1p1-4 + 0.10.3-8

Jakub Jelen • 5 years ago

a2cffc

Unbreak seccomp filter on ARM (#1796267)

Jakub Jelen • 5 years ago

7f4669

- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

Fedora Release Engineering • 5 years ago

657d13

openssh-8.1p1-3 + 0.10.3-8

Jakub Jelen • 5 years ago

62361a

Unbreak the seccomp filter also on ARM (#1777054)

Jakub Jelen • 5 years ago

c28dec

Do not extensively modify sshd_config -- DSA keys are not loaded for some time already

Jakub Jelen • 5 years ago

725460

openssh-8.1p1-2 + 0.10.3-8

Jakub Jelen • 5 years ago

d26b44

Unbreak seccomp filter with latest glibc (#1771946)

Jakub Jelen • 5 years ago

6a2fce

openssh-8.1p1-1 + 0.10.3-8

Jakub Jelen • 5 years ago

36fef5

Add missing hostkey certificate algorithms to the FIPS list

Jakub Jelen • 5 years ago

5eb2d5

Do not attempt to generate DSA and ED25519 keys in FIPS mode

Jakub Jelen • 5 years ago

d19ba9

- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

Fedora Release Engineering • 5 years ago

0ca161

openssh-8.0p1-8 + 0.10.3-7

Jakub Jelen • 5 years ago

73b069

Use the upstream version of the PKCS#8 PEM support (#1722285)

Jakub Jelen • 5 years ago

5d6a14

openssh-8.0p1-7 + 0.10.3-7

Jakub Jelen • 5 years ago

30922f

As agreed with anaconda team, they will provide a environment file under /etc/sysconfig (#1722928)

Jakub Jelen • 5 years ago

358f62

openssh-8.0p1-6 + 0.10.3-7

Jakub Jelen • 5 years ago

e9bd9a

Accept environment variable PERMITROOTLOGIN from anaconda drop-in service file (#1722928)

Jakub Jelen • 5 years ago

0b1075

openssh-8.0p1-5 + 0.10.3-7

Jakub Jelen • 5 years ago

36a447

Whitelist some annonying errors from rpmlint

Jakub Jelen • 5 years ago

e9a555

Drop INSTALL file from docs as recommended by rpmlint checks

Jakub Jelen • 5 years ago

58ee5c

Drop unused unversioned Obsoletes and Provides, which are 5 or 10 years old now

Jakub Jelen • 5 years ago

eda4c0

Disable root password logins (#1722928)

Jakub Jelen • 5 years ago

4bd6cf

Fix typos in manual pages related to crypto-policies

Jakub Jelen • 5 years ago

fdbd5b

tests: Make sure the user gets removed and the test pass

Jakub Jelen • 5 years ago

315357

openssh-8.0p1-4 + 0.10.3-7

Jakub Jelen • 5 years ago

dad744

pkcs11: Allow to specify pin-value also for ssh-add

Jakub Jelen • 5 years ago

56494b

Provide correct signature type for SHA2 certificates in agent

Jakub Jelen • 5 years ago

50e2b6

Use the new OpenSSL API to export PEM files to avoid dependency on MD5

Jakub Jelen • 5 years ago

56fdfa

Whitelist another syscall variant for s390x cryptographic module (ibmca engine)

Jakub Jelen • 5 years ago

f15fbd

Coverity warnings

Jakub Jelen • 5 years ago

66e988

openssh-8.0p1-3 + 0.10.3-7

Jakub Jelen • 5 years ago

7f1ad3

Drop the problematic patch for updating pw structure after authentication

Jakub Jelen • 5 years ago

7a1428

pkcs11: Do not require the labels on the public objects (#1710832)

Jakub Jelen • 5 years ago

ae802a

openssh-8.0p1-2 + 0.10.3-7

Jakub Jelen • 5 years ago

53c908

Use OpenSSL KDF

Jakub Jelen • 5 years ago

f726e5

Use OpenSSL high-level API to produce and verify signatures

Jakub Jelen • 5 years ago

751cd9

Mention crypto-policies in the manual pages instead of the hardcoded defaults

Jakub Jelen • 5 years ago

6caa97

Verify SCP vulnerabilities are fixed in the package testsuite

Jakub Jelen • 5 years ago

4feb6a

Drop unused patch

Jakub Jelen • 5 years ago

b33cae

FIPS: Do not fail if FIPS-unsupported algorithm is provided in configuration or on command line

Jakub Jelen • 5 years ago

f660e1

tests: Make sure the user gets removed after the test

Jakub Jelen • 5 years ago

ec02bb

openssh-8.0p1-1 + 0.10.3-7

Jakub Jelen • 5 years ago

def1de

Remove unused parts of spec file

Jakub Jelen • 5 years ago

f51d09

The FIPS_mode() is in different header file

Jakub Jelen • 5 years ago

cb3595

openssh-7.9p1-5 + 0.10.3.6

Jakub Jelen • 5 years ago

91aa3d

Do not allow negotiation of unknown primes with DG GEX in FIPS mode

Jakub Jelen • 5 years ago

81a703

Ignore PKCS#11 label if no key is found with it (#1671262)

Jakub Jelen • 5 years ago

c53a1d

Do not segfault when multiple pkcs11 providers is specified

Jakub Jelen • 5 years ago

c69454

Do not fallback to sshd_net_t SELinux context

Jakub Jelen • 5 years ago

3339ef

Reformat SELinux patch

Jakub Jelen • 5 years ago

586cf1

Update cached passwd structure after PAM authentication

Jakub Jelen • 5 years ago

134139

Make sure the kerberos cleanup procedures are properly invoked

Jakub Jelen • 5 years ago

372226

Use correct function name in the debug log

Jakub Jelen • 5 years ago

ae0701

openssh-7.9p1-4 + 0.10.3.6

Jakub Jelen • 6 years ago

7295e9

Log when a client requests an interactive session and only sftp is allowed

Jakub Jelen • 6 years ago

d711f5

ssh-copy-id: Minor issues found by shellcheck

Jakub Jelen • 6 years ago

e8524a

ssh-copy-id: Do not fail in case remote system is out of space

Jakub Jelen • 6 years ago

8622e3

Enclose redhat specific configuration with Match final block

Jakub Jelen • 6 years ago

ffb178

- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

Fedora Release Engineering • 6 years ago

4e5f61

Remove obsolete Group tag

Igor Gnatenko • 6 years ago

7c726e

Rebuilt for libcrypt.so.2 (#1666033)

Björn Esser • 6 years ago

018ac8

openssh-7.9p1-3 + 0.10.3-6

Jakub Jelen • 6 years ago

311908

Correctly initialize ECDSA key structures from PKCS#11

Jakub Jelen • 6 years ago

1b0cc8

tests: Do not expect /var/log/secure to be there

Jakub Jelen • 6 years ago

ba99e0

CVE-2018-20685 (#1665786)

Jakub Jelen • 6 years ago

40d2a0

Backport several fixes from 7_9 branch (#1665611)

Jakub Jelen • 6 years ago

322896

gsskex: Dump correct option

Jakub Jelen • 6 years ago

661c7c

Backport Match final so the crypto-policies do not break canonicalization (#1630166)

Jakub Jelen • 6 years ago

d6cc5f

openssh-7.9p1-2 + 0.10.3-6

Jakub Jelen • 6 years ago

a4c0a2

Allow to disable RSA signatures with SHA-1

Jakub Jelen • 6 years ago

57e280

Dump missing GSS options from client configuration

Jakub Jelen • 6 years ago

3ae9c1

Reference the correct file in configuration file (#1643274)

Jakub Jelen • 6 years ago

03264b

Avoid segfault on kerberos authentication failure

Jakub Jelen • 6 years ago

0b6cc1

Fix LDAP configure test (#1642414)

Mattias Ellert • 6 years ago

be6a34

openssh-7.9p1-1 + 0.10.3-6

Jakub Jelen • 6 years ago

9f2c8b

Honor GSSAPIServerIdentity for GSSAPI Key Exchange (#1637167)

Jakub Jelen • 6 years ago

e8876f

Do not break gssapi-kex authentication method

Jakub Jelen • 6 years ago

6666c1

rebase patches to openssh-7.9p1

Jakub Jelen • 6 years ago

eaa7af

Improve the naming of the new kerberos configuration option

Jakub Jelen • 6 years ago

808908

Follow the system-wide PATH settings

Jakub Jelen • 6 years ago

6c9d99

auth-krb5: Avoid memory leaks and unread assignments

Jakub Jelen • 6 years ago

f3715e

openssh-7.8p1-3 + 0.10.3-5

Jakub Jelen • 6 years ago

97ee52

Cleanup specfile comments

Jakub Jelen • 6 years ago

8ebb99

Do not let OpenSSH control our hardening flags

Jakub Jelen • 6 years ago

84d3ff

Ignore unknown parts of PKCS#11 URI

Jakub Jelen • 6 years ago

e815fb

Fix sandbox for conditional gssapi authentication (#1580017)

Jakub Jelen • 6 years ago

55520c

Fix the cavs test and avoid it crashing (#1628962)

Jakub Jelen • 6 years ago

178f3a

openssh-7.8p1-2 + 0.10.3-5

Jakub Jelen • 6 years ago

8b9448

Unbreak gssapi rekeying (#1624344)

Jakub Jelen • 6 years ago

dba154

Properly allocate buffer for gsskex (#1624323)

Jakub Jelen • 6 years ago

90edc0

Unbreak scp between two IPv6 hosts (#1620333)

Jakub Jelen • 6 years ago

940971

Address issues reported by coverity

Jakub Jelen • 6 years ago

c60b55

Drop unused environment variable

Jakub Jelen • 6 years ago

4c36c2

Drop unused patch

Jakub Jelen • 6 years ago

afaf23

openssh-7.8p1-1 + 0.10.3-5

Jakub Jelen • 6 years ago

bbf61d

7.7p1-6 + 0.10.3-4

Jakub Jelen • 6 years ago

01ba76

fips: Show real list of kex algoritms in FIPS

Jakub Jelen • 6 years ago

44e203

Allow aes-GCM modes in FIPS

Jakub Jelen • 6 years ago

951e3c

fixup the coverity fix

Jakub Jelen • 6 years ago

baff4a

coverity: RESOURCE_LEAK (CWE-772)

Jakub Jelen • 6 years ago

009e39

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

Fedora Release Engineering • 6 years ago

600d40

7.7p1-5 + 0.10.3-4

Jakub Jelen • 6 years ago

e1d855

Disable manual reading of MOTD by default

Jakub Jelen • 6 years ago

6c68d6

Drop the unused locks

Jakub Jelen • 6 years ago

191bbb

7.7p1-4 + 0.10.3-4

Jakub Jelen • 6 years ago

62f173

Improve kerberos credential cache handling (#1566494)

Jakub Jelen • 6 years ago

117678

Add pam_motd to the PAM stack

Stephen Gallagher • 6 years ago

4ef682

7.7p1-3 + 0.10.3-4

Jakub Jelen • 6 years ago

04ca5e

Opening tun devices fails + other regressions in OpenSSH v7.7 fixed upstream

Jakub Jelen • 6 years ago

48cef7

7.7p1-2 + 0.10.3-4

Jakub Jelen • 6 years ago

836590

Do not break quotes parsing in configuration file (#1566295)

Jakub Jelen • 6 years ago

ab24bd

7.7p1-1 + 0.10.3-4

Jakub Jelen • 6 years ago

b0815c

Update to latest version of URI patch passing the new tests + rebase to 7.7

Jakub Jelen • 6 years ago

af10de

Need a p11-kit to allow default pkcs11 proxy

Jakub Jelen • 6 years ago

273086

Allow loading more keys from single PKCS#11 module

Jakub Jelen • 6 years ago

42fe13

PKCS#11: Load public keys from ECDSA certificates

Jakub Jelen • 6 years ago

077597

Print PKCS#11 URI also for ECDSA keys

Jakub Jelen • 6 years ago

aad443

PKCS#11: Support ECDSA keys and PKCS#11 URIs

Jakub Jelen • 6 years ago

7e9748

Rebase to latest OpenSSH 7.7p1 (#1563223)

Jakub Jelen • 6 years ago

3cd489

tests/pam_ssh_agent_auth: Add a new sanity test

Jakub Jelen • 6 years ago

1ce235

tests/port-forwarding: Do not expect the nc will succeed

Jakub Jelen • 6 years ago

6b2140

tests/port-forwarding: Do not require rhts makefile

Jakub Jelen • 6 years ago

b4cbb0

revert part of the nss removal from LDAP

Jakub Jelen • 6 years ago

830acc

openssh-7.6p1-7 + 0.10.3-3

Jakub Jelen • 6 years ago

cbb6ca

Remove bogus nss linking

Jakub Jelen • 6 years ago

c8f138

Crypto policies changed path

Jakub Jelen • 6 years ago

92b8e5

Require crypto policies

Jakub Jelen • 6 years ago

bd5b56

Recommend crypto policies also for a server

Jakub Jelen • 6 years ago

c2a9e4

Require gcc

Jakub Jelen • 6 years ago

07c951

Remove %clean section

Igor Gnatenko • 7 years ago

a6b5c2

Remove BuildRoot definition

Igor Gnatenko • 7 years ago

5f6f10

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

Fedora Release Engineering • 7 years ago

13efdb

We need systemd-devel for sdnotify()

Jakub Jelen • 7 years ago

6a6c2b

removal of systemd-units and conforming to packaging guidelines

Jakub Jelen • 7 years ago

0780f3

openssh-7.6p1-6 + 0.10.3-3

Jakub Jelen • 7 years ago

bb4b7b

Rebuild to work around gcc bug leading to sshd miscompilation (#1538648)

Florian Weimer • 7 years ago

f61eaa

Do not audit partial auth failures

Jakub Jelen • 7 years ago

c45ece

Do not audit passsword authentication, if handled by PAM

Jakub Jelen • 7 years ago

6996c6

USER_AUTH: Remove bogus rport, add required grantors

Jakub Jelen • 7 years ago

9b05c6

Do not audit final success (#1534577)

Jakub Jelen • 7 years ago

667e6f

Use correct audit event for pubkey auth

Jakub Jelen • 7 years ago

57349a

Rebuilt for switch to libxcrypt

Björn Esser • 7 years ago

427beb

Add missing header to make it build (related to #1534577)

Jakub Jelen • 7 years ago

b1ec43

Audit correctly the res= after upstream refactoring

Jakub Jelen • 7 years ago

0f4b4c

Avoid undefined TRUE/FALSE in ldap patch to build in rawhide

Jakub Jelen • 7 years ago

38b67a

openssh-7.6p1-5 + 0.10.3-3

Jakub Jelen • 7 years ago

4d9727

Do not attempt to pass hostnames to audit (inconsistency) (#1534577)

Jakub Jelen • 7 years ago

f284c5

Drop unused function from audit

Jakub Jelen • 7 years ago

32dc9b

Remove TCP wrappers support (#1530163)

Jakub Jelen • 7 years ago

316553

openssh-7.6p1-4 + 0.10.3-3

Jakub Jelen • 7 years ago

871dc3

Whitelist gettid() syscall for systemd (cleanup procedure?)

Jakub Jelen • 7 years ago

17cd51

openssh-7.6p1-3 + 0.10.3-3

Jakub Jelen • 7 years ago

1f2a7f

Avoid gcc warnings about uninitialized variables

Jakub Jelen • 7 years ago

fde6b9

Do not segfault for repetitive cipher_free() from audit (#1524233)

Jakub Jelen • 7 years ago

217da7

7.6p1-2 + 0.10.3-3

Jakub Jelen • 7 years ago

eef660

Do not build all the binaries against libldap

Jakub Jelen • 7 years ago

e3f4c1

Do not segfault for ECC keys in PKCS#11

Jakub Jelen • 7 years ago

208792

forgotten sources

Jakub Jelen • 7 years ago

a464c8

7.6p1-1 + 0.10.3-3

Jakub Jelen • 7 years ago

8fc2fe

Make sure we audit properly from the new code

Jakub Jelen • 7 years ago

cdc735

Address issues of another PR#48 review

Jakub Jelen • 7 years ago

e0e7ed

Fix after-release bug in PermitOpen (posted on ML)

Jakub Jelen • 7 years ago

c08aa4

rebase patches to openssh-7.6p1 and make it build

Jakub Jelen • 7 years ago

5b55d0

openssh-7.5p1-6 + 0.10.3-2

Jakub Jelen • 7 years ago

9e46aa

Remove pam_reauthorize, not needed by cockpit anymore (#1492313)

Jakub Jelen • 7 years ago

ed0b5e

Enforce pam_sepermit for all logins (#1492313)

Jakub Jelen • 7 years ago

e044c5

Add newer gssapi kex methods, but leave them disabled out of the box yet

Jakub Jelen • 7 years ago

72514f

Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1477636)

Jakub Jelen • 7 years ago

8bcc21

Do not export KRBCCNAME if the default path is used (#1199363)

Jakub Jelen • 7 years ago

8c9e97

initial commit of tests from upstreamfirst project

Mike Gahagan • 7 years ago

ce1afc

openssh-7.5p1-5 + 0.10.3-2

Jakub Jelen • 7 years ago

ef66c0

Another approach for crypto policies (#1479271)

Jakub Jelen • 7 years ago

0ce6c7

Do not talk about SSHv1 in Summary

Jakub Jelen • 7 years ago

970a41

Revert "server crypto policy"

Jakub Jelen • 7 years ago

6a0593

openssh-7.5p1-4 + 0.10.3-2

Jakub Jelen • 7 years ago

fffad0

Remove openssh-clients-ssh1 subpackage (#1474942)

Jakub Jelen • 7 years ago

722f82

Preprocess the configuration files to include crypto policies.

Jakub Jelen • 7 years ago

1d8ffc

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

Fedora Release Engineering • 7 years ago

be108c

perl dependency renamed to perl-interpreter <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>

Petr Písař • 7 years ago

64a361

openssh-7.5p1-2 + 0.10.3-2

Jakub Jelen • 7 years ago

2ea24b

Sync FIPS patch with RHEL

Jakub Jelen • 7 years ago

9dbec7

get rid of unconditional goto in RSA1 code

Jakub Jelen • 7 years ago

cdc7ba

Avoid double-free in the openssl-1.1.0 patch

Jakub Jelen • 7 years ago

f07a08

In FIPS mode do not append bogus comma after the kex list

Jakub Jelen • 7 years ago

eb751f

openssh-7.5p1-2 + 0.10.3-2

Jakub Jelen • 7 years ago

204765

Revert the chroot magic

Jakub Jelen • 7 years ago

c2f63b

Remove RestartPreventExitStatus which can break on slow networks

Jakub Jelen • 7 years ago

93868f

Add missing header on s390 (#1434341)

Jakub Jelen • 7 years ago

fb74d1

Fix typo in sandbox code, that got out after release

Jakub Jelen • 7 years ago

09320c

openssh-7.5p1-1 + 0.10.3-2

Jakub Jelen • 7 years ago

17b491

Add new DH kex into the FIPS-allowed list

Jakub Jelen • 7 years ago

fd58b9

openssh-7.4p1-4 + 0.10.3-1

Jakub Jelen • 7 years ago

7b666e

Coverity reports applied

Jakub Jelen • 7 years ago

a9ad70

Do not leave service in auto-restarting mode in case of configuration failure

Jakub Jelen • 7 years ago

f499c4

Avoid sending SD_NOTIFY from wrong processes (#1427526)

Jakub Jelen • 7 years ago

b83281

openssh-7.4p1-3 + 0.10.3-1

Jakub Jelen • 7 years ago

ab7f94

Typo

Jakub Jelen • 7 years ago

3448f2

Reference upstream bug

Jakub Jelen • 7 years ago

b92d3c

Add systemd stuff to keep track of service

Jakub Jelen • 7 years ago

4e7cde

Properly report errors from included files (#1408558)

Jakub Jelen • 7 years ago

140ef5

ppc architecture is gone for years

Jakub Jelen • 7 years ago

a97eeb

Cleaner linking ldap-helper (circular dependencies)

Jakub Jelen • 7 years ago

4cf8f1

Check seteuid return values in all cases

Jakub Jelen • 7 years ago

465b6e

new pam_ssh_agent_auth-0.10.3 release

Jakub Jelen • 7 years ago

bdb932

openssh-7.4p1-2 + 0.10.2-5

Jakub Jelen • 8 years ago

26cec0

Set environment variable to avoid race condition with systemd (#1415218)

Jakub Jelen • 8 years ago

640dfa

Do not overwrite N and E for RSA-certs in ssh-agent (#1416584)

Jakub Jelen • 8 years ago

4a6ef4

Correct path to crypto policies

Jakub Jelen • 8 years ago

28ff3a

openssh-7.4p1-1 + 0.10.2-5

Jakub Jelen • 8 years ago

b19926

Whitelist /usr/lib64/ for PKCS#11 modules

Jakub Jelen • 8 years ago

58f79a

rebase to openssh-7.4p1-1

Jakub Jelen • 8 years ago

6cf9b8

Cache supported OIDS for GSSAPI kex (#1395288)

Jakub Jelen • 8 years ago

4189ce

Fix use-after-free error (#1409433)

Jakub Jelen • 8 years ago

dd8e54

Prevent hangs with long MOTD (filling buffers and blocking)

Jakub Jelen • 8 years ago

38869a

openssh-7.3p1-7 + 0.10.2-4

Jakub Jelen • 8 years ago

d8c2e8

Move MAX_DISPLAYS to a configuration option

Jakub Jelen • 8 years ago

162941

Properly deserialize received RSA certificates in ssh-agent (#1402029)

Jakub Jelen • 8 years ago

4ce574

openssh-7.3p1-6 + 0.10.2-4

Jakub Jelen • 8 years ago

7bccf7

GSSAPI requires futex syscall in privsep child (#1395288)

Jakub Jelen • 8 years ago

ef1da1

Fix changelog

Jakub Jelen • 8 years ago

ccf623

openssh-7.3p1-5 + 0.10.2-4

Jakub Jelen • 8 years ago

2a8bce

OpenSSL 1.1.0 compat

Jakub Jelen • 8 years ago

aacf0d

When doing chroot

Jakub Jelen • 8 years ago

ecc9f8

Recommend crypto-policies for a client package

Jakub Jelen • 8 years ago

c9d9fe

openssh-7.3p1-4 + 0.10.2-4

Jakub Jelen • 8 years ago

d924bc

Include client Crypto Policy (#1225752)

Jakub Jelen • 8 years ago

639ae2

Fix NULL derefence (#1380297)

Jakub Jelen • 8 years ago

ae831a

Make the code build without SELinux and without Audit

Jakub Jelen • 8 years ago

739842

openssh-7.3p1-3 + 0.10.2-4

Jakub Jelen • 8 years ago

0a605f

Proper content of the included configuration files

Jakub Jelen • 8 years ago

38d533

openssh-7.3p1-2 + 0.10.2-4

Jakub Jelen • 8 years ago

73953d

openssh-7.3p1-1. + 0.10.2-4

Jakub Jelen • 8 years ago

88f3a7

Correct permissions on the ssh_config directory (#1365270)

Jakub Jelen • 8 years ago

90ffc3

forgotten sources

Jakub Jelen • 8 years ago

7ea4bd

openssh-7.3p1-1 + 0.10.2-4

Jakub Jelen • 8 years ago

a711d3

Create include directory with example content (redhat modifications)

Jakub Jelen • 8 years ago

645408

Do not build ssh-keycat with sshd LIBS

Jakub Jelen • 8 years ago

334feb

When we don't listen for the clients, num_listen_socks is -1

Jakub Jelen • 8 years ago

b16516

Drop SCP progressmeter patch because of reworked UTF-8 API (tracked upstream #2434)

Jakub Jelen • 8 years ago

6da7f4

Move old canohost.h API to shared place, so it can be used by audit and gssapi (states)

Jakub Jelen • 8 years ago

b487a6

Most of the coverity patch applied upstream, context changes for rebase

Jakub Jelen • 8 years ago

5878eb

CVE-2016-6210 is fixed upstream

Jakub Jelen • 8 years ago

70c2ac

CVE-2015-8325 and certificate regression are fixed upstream

Jakub Jelen • 8 years ago

13a7aa

Upstream bug #2477 applied

Jakub Jelen • 8 years ago

38e1df

seccomp for secondary architecures patch already upstream (#2590)

Jakub Jelen • 8 years ago

4bd77f

Bug #2281 resolved upstream

Jakub Jelen • 8 years ago

05bc93

UTF-8 banners resolved by upstream bug #2058

Jakub Jelen • 8 years ago

178ce1

The upstream bug #2257 is fixed

Jakub Jelen • 8 years ago

14320c

openssh-7.2p2-11 + 0.10.2-3

Jakub Jelen • 8 years ago

82bfd1

Remove legacy sshd-keygen (#1359762)

Jakub Jelen • 8 years ago

6a7dd9

Remove slogin symlinks (#1359762)

Jakub Jelen • 8 years ago

793bc4

Rework SELinux context handling with chroot using libcap-ng (#1357860)

Jakub Jelen • 8 years ago

b4df5e

openssh-7.2p2-10 + 0.10.2-3

Jakub Jelen • 8 years ago

9dc741

Prevent user enumeration via timing channel (CVE-2016-6210)

Jakub Jelen • 8 years ago

105790

Expose more information to PAM

Jakub Jelen • 8 years ago

209c7a

Make closefrom() ignore softlinks to the /dev/ devices on s390

Jakub Jelen • 8 years ago

986497

openssh-7.2p2-9 + 0.10.2-3

Jakub Jelen • 8 years ago

a49441

Bad condition for UseLogin check (#1350347)

Jakub Jelen • 8 years ago

a80682

openssh-7.2p2-8 + 0.10.2-3

Jakub Jelen • 8 years ago

5a67d5

pam_ssh_agent_auth: Fix conflict bewteen two getpwuid() calls (#1349551)

Jakub Jelen • 8 years ago

8cf031

SFTP server forced permissions should restore umask

Jakub Jelen • 8 years ago

d8ffa9

pselect6 is already in upstream seccomp filter

Jakub Jelen • 8 years ago

f22e5d

UseLogin yes is not supported in Fedora

Jakub Jelen • 8 years ago

186bf3

seccomp filter for MIPS (#1195065)

Jakub Jelen • 8 years ago

c06fe5

Mandatory Perl build-requires added <https://fedoraproject.org/wiki/Changes/Build_Root_Without_Perl>

Petr Písař • 8 years ago

ad928a

openssh-7.2p2-7

Jakub Jelen • 8 years ago

ba8f38

Build seccomp filter on ppc64(le) architecture (#1195065)

Jakub Jelen • 8 years ago

f6a096

Comments for patches, merge ssh_config from localdomain to redhat patch (ssh_config related)

Jakub Jelen • 8 years ago

1144ae

Coverity -> FIPS patch

Jakub Jelen • 8 years ago

84d398

Move linux_seed() header from coverity to entropy patch

Jakub Jelen • 8 years ago

31536c

rebase x11 patch to clean up coverity patch

Jakub Jelen • 8 years ago

f28682

Coverity: dereference in pam_ssh_agent_auth

Jakub Jelen • 8 years ago

ea9421

Check for real location of .k5login file (#1328243)

Jakub Jelen • 8 years ago

d78d34

Regression in certificate-based authentication (#1333498)

Jakub Jelen • 8 years ago

8dd060

openssh-7.2p2-6 + 0.10.2-3

Jakub Jelen • 8 years ago

991b66

Add legacy sshd-keygen for anaconda (#1331077)

Jakub Jelen • 8 years ago

0b5300

openssh-7.2p2-5 + 0.10.2-3

Jakub Jelen • 8 years ago

138056

Fix typo about sshd-keygen in sysconfig (#1325535)

Jakub Jelen • 8 years ago

b7de61

Fix for CVE-2015-8325 (#1328013)

Jakub Jelen • 8 years ago

cf4e3a

openssh-7.2p2-4 + 0.10.2-3

Jakub Jelen • 8 years ago

58d286

Add sshd-keygen.target to abstract key creation from sshd.service and sshd@.service (#1325535)

Jakub Jelen • 8 years ago

5489ac

Remove unused sshd init script

Jakub Jelen • 8 years ago

461b3a

openssh-7.2p2-3 + 0.10.2-3

Jakub Jelen • 8 years ago

32a748

Make sshd-keygen comply with packaging guidelines (#1325535)

Jakub Jelen • 8 years ago

00c7b7

Soft-deny socket() syscall in seccomp sandbox (#1324493)

Jakub Jelen • 8 years ago

3d2c14

Remove *sha1 Kex in FIPS mode (#1324493)

Jakub Jelen • 8 years ago

0509c6

Remove *gcm ciphers in FIPS mode (#1324493)

Jakub Jelen • 8 years ago

117a73

openssh-7.2p2-2 + 0.10.2-3

Jakub Jelen • 8 years ago

f7e56a

Fix GSSAPI Key Exchange for older clients (#1323622)

Jakub Jelen • 8 years ago

fc0cf7

pam_ssh_agent_auth: prevent using MD5 in Fips mode

Jakub Jelen • 8 years ago

bda184

Drop init scripts dependency from sshd-keygen (#1317722)

Jakub Jelen • 8 years ago

53c999

openssh-7.2p2-1 + 0.10.2-3

Jakub Jelen • 8 years ago

9163ba

Audit: Cleanup for upstream proposal

Jakub Jelen • 8 years ago

28ce05

openssh-7.2p1-1 + 0.10.2-2

Jakub Jelen • 8 years ago

0bdae3

Restore slogin symlinks

Jakub Jelen • 8 years ago

e762f7

Forgotten rebased FIPS patch

Jakub Jelen • 8 years ago

13bf5b

openssh-7.2p1-1 (#1312870)

Jakub Jelen • 8 years ago

13073f

openssh-7.1p2-4 + 0.10.2-1

Jakub Jelen • 8 years ago

46445f

Audit race condition resolved (#1308295)

Jakub Jelen • 8 years ago

44fc97

Fix X11 forwarding CVE according to upstream

Jakub Jelen • 8 years ago

7b1544

Fix problem when running without privsep (#1303910)

Jakub Jelen • 8 years ago

4fdc3c

Remove hard glob limit since the CVE introducing this one is unrelated.

Jakub Jelen • 8 years ago

700da1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

Fedora Release Engineering • 9 years ago

b2b837

openssh-7.1p2-3 + 0.10.2-1

Jakub Jelen • 9 years ago

8ddd3e

Silently disable X11 forwarding

Jakub Jelen • 9 years ago

ca7970

Fix pam_ssh_agent_auth segfaults with non-accepted keys (#1303036)

Jakub Jelen • 9 years ago

c08255

Update sshd service file to forking (as #1291172)

Jakub Jelen • 9 years ago

d1b43a

Missing pam_ssh_agent_auth sources

Jakub Jelen • 9 years ago

7adf5f

openssh-7.1p2-2 + 0.10.2-1

Jakub Jelen • 9 years ago

6c2eb5

Remove defattr from spec file

Jakub Jelen • 9 years ago

38c773

CVE-2016-1908: Prevent possible fallback from untrusted to trusted X11 forwarding

Jakub Jelen • 9 years ago

733cea

Reabse to latest release of pam_ssh_agent_auth with preserving current functionality

Jakub Jelen • 9 years ago

87ab5f

openssh-7.1p2-1 + 0.9.2-9

Jakub Jelen • 9 years ago

7bc643

openssh-7.1p1-7 + 0.9.2-8

Jakub Jelen • 9 years ago

b2191d

Fix condition to run sshd-keygen

Jakub Jelen • 9 years ago

af94f4

Make ssh-keysign world readable (#1296724)

Jakub Jelen • 9 years ago

06b1d5

Update ssh-agent permissions (#1296724)

Jakub Jelen • 9 years ago

f26cd8

Make sure the semantics of %global macro stays the same as before a0e252571b4a8954dcfa3e4a04c53bde8f9b6172

Jakub Jelen • 9 years ago

7c5d0a

Do not check for openssl based keys if built without openssl

Jakub Jelen • 9 years ago

da62b7

Do not set default values for GSSAPI when building without GSSAPI

Jakub Jelen • 9 years ago

62897e

Fix wrong handling of LEGACY environment variable

Jakub Jelen • 9 years ago

e1b19d

Change %define to %global according to packaging guidelines

Jakub Jelen • 9 years ago

a0e252

openssh-7.1p1-6 + 0.9.2-8

Jakub Jelen • 9 years ago

c45d14

Preserve IUTF8 tty mode flag over ssh connections (#1270248)

Jakub Jelen • 9 years ago

f6bd29

Compatibility SSH_COPY_ID_LEGACY for ssh-copy-id

Jakub Jelen • 9 years ago

c9e7e7

Rebase downstream patches of ssh-copy-id into one from upstream

Jakub Jelen • 9 years ago

86f52d

GSSAPI Key Exchange documentation improvements

Jakub Jelen • 9 years ago

d9d957

Remove unused patches

Jakub Jelen • 9 years ago

f33aef

Do not require sysconfig file to start service (#1279521)

Jakub Jelen • 9 years ago

5410d2

openssh-7.1p1-5 + 0.9.2-8

Jakub Jelen • 9 years ago

ef86a3

Do not set user context too many times for root logins (#1269072)

Jakub Jelen • 9 years ago

b6d4dc

openssh-7.1p1-4 + 0.9.2-8

Jakub Jelen • 9 years ago

fa54d5

Audit implicit mac, if mac is covered in cipher (#1271694)

Jakub Jelen • 9 years ago

aa9a77

Handle root logins the same way as other users (#1269072)

Jakub Jelen • 9 years ago

0ebe96

Review SELinux user context handling after authentication (#1269072)

Jakub Jelen • 9 years ago

22a08c

Increase size limit of glob structures in sftp

Jakub Jelen • 9 years ago

8395bb

openssh-7.1p1-3 + 0.9.2-8

Jakub Jelen • 9 years ago

a80c27

Fix obsolete usage of SELinux constants (#1261496)

Jakub Jelen • 9 years ago

a01bd4

Allow gss-keyex root login when without-password is set (#2456)

Jakub Jelen • 9 years ago

bf69b4

Having no keys is not fatal in gssapi key exchange (#1261414)

Jakub Jelen • 9 years ago

6bf47e

Apply GSSAPI key exchange methods in client offered list (#1261414)

Jakub Jelen • 9 years ago

9a804f

Return back forgotten patch which prevent connection using GSSAPI key exchange (#1261414)

Jakub Jelen • 9 years ago

c6ba7b

Provide full RELRO and PIE form askpass helper (#1264036)

Jakub Jelen • 9 years ago

812f08

Fix FIPS mode for DH kex (#1260253)

Jakub Jelen • 9 years ago

3e5d95

openssh-7.1p1-2 + 0.9.2-8

Jakub Jelen • 9 years ago

982621

Fix warnings produced by gcc

Jakub Jelen • 9 years ago

c4c52b

openssh-7.1p1-1 + 0.9.3-8

Jakub Jelen • 9 years ago

757fec

Add corresponding options for ssh1 configure

Jakub Jelen • 9 years ago

ccd186

HostKeyAlgorithms option on server is broken when using + sign

Jakub Jelen • 9 years ago

c98f55

openssh-7.0p1-2 + 0.9.3-7

Jakub Jelen • 9 years ago

ebdae8

Fix typo in version string

Jakub Jelen • 9 years ago

18e549

Possibility to validate legacy systems by more fingerprints (#1249626)

Jakub Jelen • 9 years ago

4df30a

Add GSSAPIKexAlgorithms option for server and client application

Jakub Jelen • 9 years ago

bc4ef0

Fix problem with DSA keys using pam_ssh_agent_auth (#1251777)

Jakub Jelen • 9 years ago

459bd2

Forgotten sources :(

Jakub Jelen • 9 years ago

d0337f

openssh-7.0p1-1 + 6.9.3-7

Jakub Jelen • 9 years ago

3f5513

Create openssh-clients-ssh1 subpackage with tools for protocol SSHv1

Jakub Jelen • 9 years ago

2939c3

Fix pam_ssh_agent_auth after rebase (#1251777)

Jakub Jelen • 9 years ago

405790

Remove obsolete triggerruns for migration to systemd

Jakub Jelen • 9 years ago

1d5067

6.9p1-4 + 0.9.3-6

Jakub Jelen • 9 years ago

6286d6

Handle terminal control characters in scp progressmeter (#1247204)

Jakub Jelen • 9 years ago

67938e

6.9p1-3 + 0.9.3-6

Jakub Jelen • 9 years ago

83bfb1

only query each keyboard-interactive device once (#1245971)

Jakub Jelen • 9 years ago

c6d2ec

6.9p1-2 + 0.9.3-6

Jakub Jelen • 9 years ago

ca62b6

Fix race condition with auditing messages answers (#1242682)

Jakub Jelen • 9 years ago

6e9574

Patch name, formating

Jakub Jelen • 9 years ago

a4d9cd

Allow building seccomp filters also for s390(x) architectures (#1195065)

Jakub Jelen • 9 years ago

58ba50

Forgotten sources

Jakub Jelen • 9 years ago

274e22

6.9p1-1 + 0.9.3-6

Jakub Jelen • 9 years ago

187a34

Correctly revert "PermitRootLogin no" option from upstream sources

Jakub Jelen • 9 years ago

5de6c8

rebase to new upstream release 6.9

Jakub Jelen • 9 years ago

535d34

Increase limitation number of files which can be listed using glob in sftp

Jakub Jelen • 9 years ago

21bee6

6.8p1-9 + 0.9.3-5

Jakub Jelen • 9 years ago

f3002b

Allow socketcall(SYS_SHUTDOWN) for net_child on ix86 architecture

Jakub Jelen • 9 years ago

252221

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

Dennis Gilmore • 9 years ago

b59dd8

6.8p1-8 + 0.9.3-5

Jakub Jelen • 9 years ago

5aa47a

Return stat syscall to seccomp filter, since it is not yet completely legacy (#1228323)

Jakub Jelen • 9 years ago

7fa505

6.8p1-7 + 0.9.3-5

Jakub Jelen • 9 years ago

f049b3

Correct handle pam_ssh_agent_auth memory, buffers and variable sizes, which caused segfaults (#1225106)

Jakub Jelen • 9 years ago

73d45f

6.8p1-6 + 0.9.3-5

Jakub Jelen • 9 years ago

8a10dc

Provide LDIF version of LPK schema

Jakub Jelen • 9 years ago

09ca6e

Document required selinux boolean for working ssh-ldap-helper

Jakub Jelen • 9 years ago

474a38

Add missing configuration values to ssh man page

Jakub Jelen • 9 years ago

df3679

Add missing Banner in sshd -T output

Jakub Jelen • 9 years ago

0a076e

Fix upstream memory problems

Jakub Jelen • 9 years ago

8244d5

Resolve problem with pam_ssh_agent_auth after rebase (#1225106)

Jakub Jelen • 9 years ago

637556

ssh-copy-id: tcsh doesnt work with multiline strings so we will make it uggly one-line

Jakub Jelen • 9 years ago

3e3570

6.8p1-5 + 0.9.3-5

Jakub Jelen • 9 years ago

775e1b

Fix segfault on daemon exit caused by API change (#1213423)

Jakub Jelen • 9 years ago

054365

6.8p1-4 + 0.9.3-5

Jakub Jelen • 9 years ago

c51631

Fix audit_end_command to restore ControlPersist function (#1203900)

Jakub Jelen • 9 years ago

f78ec0

6.8p1-3 + 0.9.3-5

Jakub Jelen • 9 years ago

c028ac

Add pam_namespace to sshd pam stack (based on #1125110)

Jakub Jelen • 9 years ago

968dbc

Revert "Fix buffer handling in GSS after rebase" (#1207719)

Jakub Jelen • 9 years ago

d1bd58

Fix memory leak from upstream

Jakub Jelen • 9 years ago

576cdf

Fix handling SELinux context in MLS systems

Jakub Jelen • 9 years ago

b8a0f7

Remove krb5-config workaround for #1203900

Jakub Jelen • 9 years ago

23bc31

Regression: solve sshd segfaults if other instance already running

Jakub Jelen • 9 years ago

af7be1

6.8p1-2 + 0.9.3-5

Jakub Jelen • 9 years ago

e5b15a

Fix buffer handling in GSS after rebase

Jakub Jelen • 9 years ago

d94cf2

Fix reintroduced upstrem bug #1878

Jakub Jelen • 9 years ago

07756a

Update audit patch after rebase with more sanity checks

Jakub Jelen • 9 years ago

12cf3e

rebuild 6.8p1-1.1 + 0.9.3-5

Jakub Jelen • 9 years ago

aa8fb3

rebuild 6.8p1-1.1 + 0.9.3-5

Jakub Jelen • 9 years ago

1330ed

release 6.8p1-1 + 0.9.3-5

Jakub Jelen • 9 years ago

e3688f

Workaround krb5-config bug (#1204646)

Jakub Jelen • 9 years ago

d27669

Resolve segfault with auditing commands (#1203900)

Jakub Jelen • 9 years ago

acf988

Make pam_ssh_agent compile with current ssh

Jakub Jelen • 9 years ago

114dfe

6.8p1-1 + 0.9.3-5

Jakub Jelen • 9 years ago

132f8f

6.7p1-11 + 0.9.3-4

Jakub Jelen • 9 years ago

7b82d0

Fix tmpfiles to be more consistent with other config files in package (#1196807)

Jakub Jelen • 9 years ago

c31740

Add sftp option to force mode of created files

Jakub Jelen • 9 years ago

558fb7

Fix auditing when using combination of ForceCommand and PTY

Jakub Jelen • 9 years ago

c8062c

Ability to specify an arbitrary LDAP filter in ldap.conf for ssh-ldap-helper

Jakub Jelen • 9 years ago

3bc8b8

architecture dependent comments for seccomp filter (#1195065)

Jakub Jelen • 9 years ago

68fa4f

6.7p1-10 + 0.9.3-4

Jakub Jelen • 9 years ago

7aa632

Add tmpfiles.d entries (#1196807)

Jakub Jelen • 9 years ago

766438

6.7p1-9 + 0.9.3-4

Jakub Jelen • 9 years ago

c8b407

Adjust seccomp fiter for primary architectures and solve aarch64 issue (#1197051)

Jakub Jelen • 9 years ago

bc083e

Solve issue with ssh-copy-id and keys without trailing newline (#1093168)

Jakub Jelen • 9 years ago

cbda6f

6.7p1-8 + 0.9.3-4

Jakub Jelen • 9 years ago

5f3c83

Add AArch64 support for seccomp_filter sandbox (#1195065)

Marcin Juszkiewicz • 9 years ago

665648

6.7p1-7 + 0.9.3-4

Jakub Jelen • 9 years ago

e0f867

Fix build issue without getuid32

Jakub Jelen • 9 years ago

e3a625

6.7p1-6 + 0.9.3-4

Jakub Jelen • 9 years ago

c13a4b

Fix seccomp filter for ix68 (#1194401), fix previous commit

Jakub Jelen • 9 years ago

d5a800

fix if statement

Peter Robinson • 9 years ago

b9846a

Only use seccomp for sandboxing on supported platforms

Peter Robinson • 9 years ago

74e740

6.7p1-4 + 0.9.3-4

Jakub Jelen • 9 years ago

c69452

cleanup working directory, spec file and unused patches after rebase

Jakub Jelen • 9 years ago

77f453

Move cavs tests into subpackage -cavs (#1194320)

Jakub Jelen • 9 years ago

08cb90

6.7p1-3 + 0.9.3-4

Jakub Jelen • 9 years ago

2f5563

Fix ssh-copy-id on non-sh shells (#1045191)

Jakub Jelen • 9 years ago

6df422

Add SSH KDF CAVS test driver for future FIPS validation (#1193045)

Jakub Jelen • 9 years ago

bb3e88

Use global hardening specification instead of hardening made by openssh.

Jakub Jelen • 9 years ago

14c675

Enable seccomp sandboxing after resolving problems with audit patch (#1062953)

Jakub Jelen • 10 years ago

0a4ac4

Make output of sshd -T more consistent, using upstream patch (#1187521)

Jakub Jelen • 10 years ago

b552eb

Update coverity patch after rebase to 6.7

Jakub Jelen • 10 years ago

580f98

6.7p1-2 + 0.9.3-4

Jakub Jelen • 10 years ago

6c6416

Fix audit patch after rebase to 6.7

Jakub Jelen • 10 years ago

021326

temporarily disable audit patch causing segmentation faults

Petr Lautrbach • 10 years ago

9b4e25

restore tcp wrappers support, based on Debian patch

Petr Lautrbach • 10 years ago

f29c87

6.7p1-1 + 0.9.3-4

Petr Lautrbach • 10 years ago

190035

use upstream FigerPrintHash for fingerprint - 56d1c83cdd1ac76f1c6bd41e01e80dad834f3994

Petr Lautrbach • 10 years ago

b457c9

fix direction in CRYPTO_SESSION audit message

Petr Lautrbach • 10 years ago

985843

Fix changelog entry

Jakub Jelen • 10 years ago

3ffcb7

6.6.1p1-11 + 0.9.3-3

Jakub Jelen • 10 years ago

2109ab

add new option GSSAPIEnablek5users and disable using ~/.k5users by default

Petr Lautrbach • 10 years ago

140e5c

Update vendor-patchlevel string

Jakub Jelen • 10 years ago

9080a8

Update ldap extension to resolve #981058

Jakub Jelen • 10 years ago

f92cd0

Add missing documentation link to systemd service files (RHBZ#1181593)

Jakub Jelen • 10 years ago

e581af

Fix config parser for ip:port values (#1130733)

Jakub Jelen • 10 years ago

b9d68e

Fix confusing error message in scp (#1142223)

Jakub Jelen • 10 years ago

fd06d6

6.6.1p1-10 + 0.9.3-3

Petr Lautrbach • 10 years ago

62986c

log via monitor in chroots without /dev/log

Petr Lautrbach • 10 years ago

7a7b8f

record pfs= field in CRYPTO_SESSION audit event

Petr Lautrbach • 10 years ago

720cf8

increase size of AUDIT_LOG_SIZE to 256

Petr Lautrbach • 10 years ago

cf5c11

6.6.1p1-9 + 0.9.3-3

Petr Lautrbach • 10 years ago

276c16

the .local domain example should be in ssh_config, not in sshd_config

Petr Lautrbach • 10 years ago

56a647

use different values for DH for Cisco servers (#1026430)

Petr Lautrbach • 10 years ago

08fe9e

6.6.1p1-8 + 0.9.3-3

Petr Lautrbach • 10 years ago

823364

fix several coverity issues Resolves: rhbz#1139794

Petr Lautrbach • 10 years ago

44f0ac

fix gsskex patch to correctly handle MONITOR_REQ_GSSSIGN request (#1118005)

Petr Lautrbach • 10 years ago

57666d

6.6.1p1-7 + 0.9.3-3

Petr Lautrbach • 10 years ago

a1e1ac

correct the calculation of bytes for authctxt->krb5_ccname <ams@corefiling.com> (#1161073)

Petr Lautrbach • 10 years ago

65a6cd

6.6.1p1-6 + 0.9.3-3

Petr Lautrbach • 10 years ago

3b7c86

privsep_preauth: use SELinux context from selinux-policy (#1008580)

Petr Lautrbach • 10 years ago

5296a7

change audit trail

Petr Lautrbach • 10 years ago

414bfa

fix kuserok patch which checked for the existence of .k5login unconditionally and hence prevented other mechanisms to be used properly

Petr Lautrbach • 10 years ago

30c06a

revert the default of KerberosUseKuserok back to yes (#1153076)

Petr Lautrbach • 10 years ago

1ba984

Ignore SIGXFSZ in postauth monitor

Petr Lautrbach • 10 years ago

0f0e05

fix parsing of empty arguments in sshd_conf

Petr Lautrbach • 10 years ago

4b2496

sshd-keygen - don't generate DSA and ED25519 host keys in FIPS mode

Stanislav Zidek • 10 years ago

c8fc19

6.6.1p1-5 + 0.9.3-3

Petr Lautrbach • 10 years ago

afde9f

don't consider a partial success as a failure

Petr Lautrbach • 10 years ago

ce2d80

apply RFC3454 stringprep to banners when possible

Petr Lautrbach • 10 years ago

163064

change the rsa key generation error message due to FIPS restrictions in openssl

Petr Lautrbach • 10 years ago

c16b70

set a client's address right after a connection is set

Petr Lautrbach • 10 years ago

0a3f4e

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

Peter Robinson • 10 years ago

662c5a

fix license handling

Tom Callaway • 10 years ago

e336e3

6.6.1p1-3 + 0.9.3-2

Petr Lautrbach • 10 years ago

8ff21c

standardise on NI_MAXHOST for gethostname() string lengths (#1051490)

Petr Lautrbach • 10 years ago

817071

6.6.1p1-2 + 0.9.3-2

Petr Lautrbach • 10 years ago

cef0d5

minor spec file cleanup

Petr Lautrbach • 10 years ago

d8b90a

fix and rebase fips patch to 6.6.1p1

Petr Lautrbach • 10 years ago

802815

cleanup and remove FIPS code from audit patch

Petr Lautrbach • 10 years ago

9f526c

rebase audit patch for 6.6.1p1

Petr Lautrbach • 10 years ago

5160c9

Add pam_reauthorize.so to sshd.pam (#1115977)

Stef Walter • 10 years ago

26621f

bring back openssh-5.5p1-x11.patch

Petr Lautrbach • 10 years ago

86f29c

drop openssh-5.8p2-remove-stale-control-socket.patch

Petr Lautrbach • 10 years ago

5fcfca

bring back the openssh-5.8p2-sigpipe.patch

Petr Lautrbach • 10 years ago

8b5fee

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

Dennis Gilmore • 10 years ago

d1b093

add missing patches and remove unused patches

Petr Lautrbach • 10 years ago

7463b6

add forgotten openssh-6.6p1-gsskex.patch

Petr Lautrbach • 10 years ago

3e1dd6

6.6.1p1-1 + 0.9.3-2

Petr Lautrbach • 10 years ago

5cde9c

slightly change systemd units logic - use sshd-keygen.service (#1066615)

Petr Lautrbach • 10 years ago

d1c2eb

drop openssh-server-sysvinit subpackage

Petr Lautrbach • 10 years ago

fb6f39

add support for ED25519 keys to sshd-keygen and sshd.sysconfig

Petr Lautrbach • 10 years ago

4253bf

OpenSSH 6.5 and 6.6 sometimes encode a value used in the

Petr Lautrbach • 10 years ago

44fb3c

rebase to openssh-6.6p1

Petr Lautrbach • 10 years ago

94c6f8

6.4p1-4 + 0.9.3-1

Petr Lautrbach • 10 years ago

d75575

ignore environment variables with embedded '=' or '\0' characters (#1077843)

Petr Lautrbach • 10 years ago

8f8619

prevent a server from skipping SSHFP lookup (#1081338)

Petr Lautrbach • 10 years ago

d271e0

try CLOCK_BOOTTIME with fallback (#1091992)

Petr Lautrbach • 10 years ago

9a031d

don't clean up gssapi credentials by default (#1055016)

Petr Lautrbach • 10 years ago

f3b39b

make /etc/ssh/moduli file public (#1043661)

Petr Lautrbach • 10 years ago

f9f83a

fix ssh-copy-id (#1058792)

Petr Lautrbach • 10 years ago

c3c35d

log fipscheck verification message into syslog authpriv

Petr Lautrbach • 10 years ago

e2813b

sshd-keygen.service - don't check dsa key, use ecdsa instead

Petr Lautrbach • 10 years ago

9060bb

use tty allocation for a remote scp

Petr Lautrbach • 11 years ago

96df3b

Run ssh-copy-id in the legacy mode when SSH_COPY_ID_LEGACY variable is set

Petr Lautrbach • 11 years ago

b898cb

FIPS mode - adjust the key echange DH groups and ssh-keygen according to SP800-131A

Petr Lautrbach • 11 years ago

084bc6

6.4p1-3 + 0.9.3-1

Petr Lautrbach • 11 years ago

222dd2

use only rsa and ecdsa host keys by default

Petr Lautrbach • 11 years ago

2b2955

sshd-keygen - create an ecdsa host key with 640 permissions (#1023945)

Petr Lautrbach • 11 years ago

545aa0

6.4p1-2 + 0.9.3-1

Petr Lautrbach • 11 years ago

89d920

fix fatal() cleanup in the audit patch (#1029074)

Petr Lautrbach • 11 years ago

82d2be

fix parsing logic of ldap.conf file (#1033662)

Petr Lautrbach • 11 years ago

36a09e

minor change in HOWTO.ssh-keycat - s/AuthorizedKeysCommandRunAs/AuthorizedKeysCommandUser/

Petr Lautrbach • 11 years ago

8f439b

6.4p1-1 + 0.9.3-1

Petr Lautrbach • 11 years ago

09e9ef

rebase audit patch for openssh-6.4p1

Petr Lautrbach • 11 years ago

27189b

6.3p1-5 + 0.9.3-7

Petr Lautrbach • 11 years ago

3ed619

don't use xfree in pam_ssh_agent_auth sources <geertj@gmail.com> (#1024965)

Petr Lautrbach • 11 years ago

579532

adjust gss kex mechanism to the upstream changes (#1024004)

Petr Lautrbach • 11 years ago

383448

6.3p1-4 + 0.9.3-6

Petr Lautrbach • 11 years ago

7feb96

rebuild with openssl-1.0.1e-29.fc20 to enable ECC support

Petr Lautrbach • 11 years ago

2add7a

rebuild with openssl-1.0.1e-29.fc20 to enable ECC support

Petr Lautrbach • 11 years ago

f0aa6e

6.3p1-3 + 0.9.3-6

Petr Lautrbach • 11 years ago

a5e23f

don't use SSH_FP_MD5 for fingerprints in FIPS mode

Petr Lautrbach • 11 years ago

265df5

6.3p1-2 + 0.9.3-6

Petr Lautrbach • 11 years ago

ff7a26

sshd-keygen to generate ECDSA keys <i.grok@comcast.net> (#1019222)

Petr Lautrbach • 11 years ago

1462de

Increase the size of the Diffie-Hellman groups requested for a each

Petr Lautrbach • 11 years ago

1f3640

use default_ccache_name from /etc/krb5.conf for a kerberos cache (#991186)

Petr Lautrbach • 11 years ago

d088f9

cleanup GSSAPI code

Petr Lautrbach • 11 years ago

99076b

added Obsoletes: *fips

Petr Lautrbach • 11 years ago

e40d5d

bring pam_ssh_agent_auth-0.9.3.tar.bz2 back to sources

Petr Lautrbach • 11 years ago

9723b7

upload openssh-6.3p1.tar.gz to cache

Petr Lautrbach • 11 years ago

bf9d26

upload openssh-6.3p1.tar.gz to cache

Petr Lautrbach • 11 years ago

c67d84

6.3p1-1 + 0.9.3-6

Petr Lautrbach • 11 years ago

a92e91

rebase for openssh-6.3p1, remove unused patches (#1007769)

Petr Lautrbach • 11 years ago

84822b

6.2p2-9 + 0.9.3-5

Petr Lautrbach • 11 years ago

c33ef5

use dracut-fips file /etc/system-fips to determine if a FIPS module is installed

Petr Lautrbach • 11 years ago

f12afd

Revert "add -fips subpackages that contains the FIPS module files"

Petr Lautrbach • 11 years ago

2ae5f9

Revert "add missing Requires: openssl-fips in -fips subpackages"

Petr Lautrbach • 11 years ago

d4d829

Revert "use hmac_suffix for ssh{,d} hmac checksums"

Petr Lautrbach • 11 years ago

b61d9c

Revert "adjust openssh-6.2p1-vendor.patch after previous commit"

Petr Lautrbach • 11 years ago

47b1c9

Revert "use {?dist} tag in suffixes for hmac checksum files"

Petr Lautrbach • 11 years ago

0cc005

6.2p2-8 + 0.9.3-5

Petr Lautrbach • 11 years ago

f344f8

sshd-keygen: generate only RSA keys by default (#1010092)

Petr Lautrbach • 11 years ago

65d16f

use {?dist} tag in suffixes for hmac checksum files

Petr Lautrbach • 11 years ago

15244e

6.2p2-7 + 0.9.3-5

Petr Lautrbach • 11 years ago

eba55f

automatically restart sshd.service on-failure with 42s interval

Petr Lautrbach • 11 years ago

0463fb

adjust openssh-6.2p1-vendor.patch after previous commit

Petr Lautrbach • 11 years ago

4936e2

use hmac_suffix for ssh{,d} hmac checksums

Petr Lautrbach • 11 years ago

c6724c

bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A

Petr Lautrbach • 11 years ago

9acec0

add missing Requires: openssl-fips in -fips subpackages

Petr Lautrbach • 11 years ago

a19397

6.2p2-6 + 0.9.3-5

Petr Lautrbach • 11 years ago

f4e927

add -fips subpackages that contains the FIPS module files

Petr Lautrbach • 11 years ago

227f4f

6.2p2-5 + 0.9.3-5

Petr Lautrbach • 11 years ago

631ffb

gssapi credentials need to be stored before a pam session opened (#987792)

Petr Lautrbach • 11 years ago

b20efe

6.2p2-4 + 0.9.3-5

Petr Lautrbach • 11 years ago

115aad

don't show Success for EAI_SYSTEM (#985964)

Petr Lautrbach • 11 years ago

17df27

make sftp's libedit interface marginally multibyte aware (#841771)

Petr Lautrbach • 11 years ago

2ee681

6.2p2-3 + 0.9.3-5

Petr Lautrbach • 11 years ago

66608a

move kerberos cache to /run/user/<uid>/ by default (#848228)

Petr Lautrbach • 11 years ago

aacd01

make an object class filter configurable <charles@dyfis.net> (#963281)

Petr Lautrbach • 11 years ago

e6dbb8

6.2p2-2 + 0.9.3-5

Petr Lautrbach • 11 years ago

e99c48

add socket activated sshd units to the package (#963268)

Petr Lautrbach • 11 years ago

678b80

fix the example in the HOWTO.ldap-keys

Petr Lautrbach • 11 years ago

f5022a

remove unused openssh-6.2p1-track-IdentifyFile.patch

Petr Lautrbach • 11 years ago

f29f75

6.2p2-1 + 0.9.3-5

Petr Lautrbach • 11 years ago

21acbc

always use /sbin/nologin as privsep user's shell

Petr Lautrbach • 11 years ago

d48f1a

6.2p1-4 + 0.9.3-4

Petr Lautrbach • 11 years ago

a92d74

don't use export in sysconfig file (#953111)

Petr Lautrbach • 11 years ago

1a246a

don't use GPLv3 versions of config.{sub,guess}

Petr Lautrbach • 11 years ago

df630e

cleanup spec file and patches

Petr Lautrbach • 11 years ago

1d76d1

6.2p1-3 + 0.9.3-4

Petr Lautrbach • 11 years ago

c276d3

add latest config.{sub,guess} to support aarch64 (#926284)

Petr Lautrbach • 11 years ago

894ab5

sshd.service: use KillMode=process (#890376)

Petr Lautrbach • 11 years ago

383e35

6.2p1-2 + 0.9.3-4

Petr Lautrbach • 11 years ago

104278

keep track of which IndentityFile options were manually supplied and which were default options, and don't warn if the latter are missing. (mindrot#2084)

Petr Lautrbach • 11 years ago

fcef7f

fix sources

Petr Lautrbach • 11 years ago

2f45e7

6.2p1-1 + 0.9.3-4

Petr Lautrbach • 11 years ago

b6f89a

fix several issues with empty MAC in openssh-6.2p1-audit.patch

Petr Lautrbach • 11 years ago

014fe8

merge all -audit* patches together

Petr Lautrbach • 11 years ago

d3d59d

build regress/modpipe tests with $(CFLAGS)

Petr Lautrbach • 11 years ago

8d9702

rebase to openssh-6.2p1 (#924727)

Petr Lautrbach • 11 years ago

8a29de

allow specification of alternate host key location(s) via /etc/sysconfig/sshd

Petr Lautrbach • 11 years ago

811ec1

6.1p1-7 + 0.9.3-3

Petr Lautrbach • 11 years ago

1b95bc

use SELinux type sshd_net_t for [net] childs (#915085)

Petr Lautrbach • 11 years ago

338e71

6.1p1-6 + 0.9.3-3

Petr Lautrbach • 12 years ago

2a7883

fix AuthorizedKeysCommand option and adopt latest upstream changes

Petr Lautrbach • 12 years ago

c9e43c

pam_ssh_agent_auth - change paths from %{_lib} to %{_libdir}

Petr Lautrbach • 12 years ago

d2b3b9

fix bogus day names in changelog dates

Petr Lautrbach • 12 years ago

19725a

6.1p1-5 + 0.9.3-3

Petr Lautrbach • 12 years ago

cab7f5

change default value of MaxStartups - CVE-2010-5107 - #908707

Petr Lautrbach • 12 years ago

5bc906

add BuildRequires: perl-podlators

Petr Lautrbach • 12 years ago

87391b

6.1p1-4 + 0.9.3-3

Petr Lautrbach • 12 years ago

7642de

fix segfault in openssh-5.8p2-force_krb.patch (#882541)

Petr Lautrbach • 12 years ago

4dbe32

6.1p1-3 + 0.9.3-3

Petr Lautrbach • 12 years ago

790103

fix privsep patch

Petr Lautrbach • 12 years ago

f578f0

obsolete RequiredAuthentications[12] options

Petr Lautrbach • 12 years ago

fe661c

remove unused openssh-5.9p1-2auth.patch

Petr Lautrbach • 12 years ago

283f3a

reformat several patches after openssh-6.1p1-authenticationmethods.patch

Petr Lautrbach • 12 years ago

5039c7

replace RequiredAuthentications2 with AuthenticationMethods according to upstream

Petr Lautrbach • 12 years ago

bffd1c

remove unused patches

Petr Lautrbach • 12 years ago

e75a99

fix warnings in ssh-add and sshd_config man pages

Petr Lautrbach • 12 years ago

251c8d

fix the required authentications patch (#872608)

Petr Lautrbach • 12 years ago

20d541

fix the man moduli page (#841065)

Petr Lautrbach • 12 years ago

ab30b9

avoid xfree(NULL) in ssh_selinux_copy_context() (#789502)

bach • 12 years ago

dfa0cd

adapt openssh-6.1p1-akc.patch to the upstream version - https://bugzilla.mindrot.org/show_bug.cgi?id=1663

bach • 12 years ago

f7f8b4

fix gssapi canohost patch (#863350)

Petr Lautrbach • 12 years ago

52c8ec

6.1p1-2 + 0.9.3-3

Petr Lautrbach • 12 years ago

af2ebf

drop openssh-5.9p1-sftp-chroot.patch (#830237)

Petr Lautrbach • 12 years ago

afd52c

add SELinux comment to /etc/ssh/sshd_config about SELinux command to modify port (#861400)

Petr Lautrbach • 12 years ago

470ebd

smartcard support is replaced with PKCS#11 support already in 5.4p1 https://bugzilla.mindrot.org/show_bug.cgi?id=1371

Petr Lautrbach • 12 years ago

13cf24

drop required chkconfig (#865498)

Petr Lautrbach • 12 years ago

1a5c95

remove openssh-6.0p1-noacss.tar.bz2 from sources

Petr Lautrbach • 12 years ago

e7c6eb

upload openssh-6.1p1-noacss.tar.bz2 to cache

Petr Lautrbach • 12 years ago

0512a0

6.1p1-1 + 0.9.3-3

Petr Lautrbach • 12 years ago

d0630a

to run tests use --with check

Petr Lautrbach • 12 years ago

fd408e

don't use /bin and /sbin paths (#856590)

Petr Lautrbach • 12 years ago

e58e54

don't use chroot_user_t for chrooted users (#830237)

Petr Lautrbach • 12 years ago

581bf3

rebase to openssh-6.1p1 (#852651)

Petr Lautrbach • 12 years ago

9fe1af

use DIR: kerberos cache type (#848228)

Petr Lautrbach • 12 years ago

51ca3b

replace scriptlets with systemd macros (#850249)

Petr Lautrbach • 12 years ago

94943d

rebase to openssh-6.0p1

Petr Lautrbach • 12 years ago

65ba94

5.9p1-26 + 0.9.3-1

Petr Lautrbach • 12 years ago

90e11f

handle crypt() returning NULL (#815993)

Petr Lautrbach • 12 years ago

5382cc

openssh-5.9p1-privsep-selinux.patch - change SELinux context also for

Petr Lautrbach • 12 years ago

0c438f

5.9p1-25 + 0.9.3-1

Petr Lautrbach • 12 years ago

b64889

removed dead code and fixed segfault in openssh-5.9p1-required-authentications.patch

Petr Lautrbach • 12 years ago

420ff0

allow sha256 and sha512 hmacs in the FIPS mode

Tomas Mraz • 12 years ago

e96203

fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent

Tomas Mraz • 12 years ago

4f4687

Revert "Fix permissions of sshd private keys created by sshd-keygen script (#754779)" (#819896)

Petr Lautrbach • 12 years ago

c4fd06

5.9p1-22 + 0.9.2-32

Petr Lautrbach • 12 years ago

2649d9

don't install sshd-keygen.service (#810419)

Petr Lautrbach • 12 years ago

009f53

don't create RSA1 key in FIPS mode

Petr Lautrbach • 12 years ago

2539b1

5.9p1-21 + 0.9.2-32

Petr Lautrbach • 12 years ago

7294a9

fix various issues in openssh-5.9p1-required-authentications.patch

Petr Lautrbach • 12 years ago

5bad1d

5.9p1-20 + 0.9.2-32

Petr Lautrbach • 12 years ago

22f019

don't enable sshd-keygen.service (#805338)

Petr Lautrbach • 12 years ago

1027fd

fix dependencies in systemd units (#805338)

Petr Lautrbach • 12 years ago

52f99b

5.9p1-19 + 0.9.2-32

Petr Lautrbach • 12 years ago

33e0ac

adjust openssh-5.9p1-privsep-selinux.patch also for internal sftp subsystem

Petr Lautrbach • 12 years ago

c3bb45

Look for x11 forward sockets with AI_ADDRCONFIG flag getaddrinfo (#735889)

Petr Lautrbach • 13 years ago

feb99e

5.9p1-18 + 0.9.2-32

Petr Lautrbach • 13 years ago

d3ab95

replace TwoFactorAuth with RequiredAuthentications[12]

Petr Lautrbach • 13 years ago

d9e618

5.9p1-17 + 0.9.2-32

Petr Lautrbach • 13 years ago

21699d

run privsep slave process as the users SELinux context (#781634)

Petr Lautrbach • 13 years ago

cd5891

add CAVS test driver for the aes-ctr ciphers

Tomas Mraz • 13 years ago

017c65

enable aes-ctr ciphers use the EVP engines from OpenSSL such as the AES-NI

Tomas Mraz • 13 years ago

6148ab

5.9p1-14 + 0.9.2-32

Petr Lautrbach • 13 years ago

2e1287

warn about unsupported option UsePAM=no (#757545)

Petr Lautrbach • 13 years ago

5bd5aa

add back the restorecon call to ssh-copy-id - it might be needed on older

Tomas Mraz • 13 years ago

4fc167

Load also the /etc/sysconfig/sshd before the sshd-keygen script.

Tomas Mraz • 13 years ago

2aa158

Fix permissions of sshd private keys created by sshd-keygen script (#754779)

Tomas Mraz • 13 years ago

81da99

still support /etc/sysconfig/sshd loading in sshd service (#754732)

Tomas Mraz • 13 years ago

17eb10

remove unnecessary requires on initscripts

Tomas Mraz • 13 years ago

0fcb25

selinux sandbox rewrite

Jan F. Chadima • 13 years ago

fcc5bd

selinux sandbox rewrite

Jan F. Chadima • 13 years ago

28b0dc

coverity upgrade

Jan F. Chadima • 13 years ago

cff1d0

coverity upgrade

Jan F. Chadima • 13 years ago

c870e6

fully reanable auditing

JFCH • 13 years ago

c2ea13

repair signedness in akc patch

Jan F. Chadima • 13 years ago

1df0cf

temporarily disable part of audit4 patch

Jan F. Chadima • 13 years ago

026db1

temporarily disable part of audit4 patch

Jan F. Chadima • 13 years ago

39b26b

Coverity second pass

Jan F. Chadima • 13 years ago

ea97ff

Add chunk missed in the new upstream merge.

Tomas Mraz • 13 years ago

fc87f2

Coverity first pass

Jan F. Chadima • 13 years ago

3b545b

Rebase to 5.9p1

Jan F. Chadima • 13 years ago

311e6b

ignore SIGPIPE in ssh keyscan

Jan F. Chadima • 13 years ago

69dd72

ignore SIGPIPE in ssh keyscan

Jan F. Chadima • 13 years ago

19d4c7

save ssh-askpass's debuginfo

Jan F. Chadima • 13 years ago

2b67a5

compile ssh-askpass with corect CFLAGS

Jan F. Chadima • 13 years ago

56b50e

improve selinux's change context log

Jan F. Chadima • 13 years ago

eed2da

improve selinux's change context log

Jan F. Chadima • 13 years ago

54f33f

repair broken man pages

Jan F. Chadima • 13 years ago

ec3622

rebuild

Jan F. Chadima • 13 years ago

159278

rebuild

Jan F. Chadima • 13 years ago

d704ea

Do not change context when run under unconfined_t

Jan F. Chadima • 13 years ago

cadffc

Do not change context when run under unconfined_t

Jan F. Chadima • 13 years ago

ca6abd

Do not change context when run under unconfined_t

Jan F. Chadima • 13 years ago

294ca7

Add postlogin to pam. (#718807)

Jan F. Chadima • 13 years ago

d3d340

Add postlogin to pam. (#718807)

Jan F. Chadima • 13 years ago

0d4fd5

Add After auditd.service to sshd.service.

Tomas Mraz • 13 years ago

9f698d

Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>

Jan F. Chadima • 13 years ago

d56cc3

Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>

Jan F • 13 years ago

2953c8

Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>

Jan F • 13 years ago

273d63

Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>

Jan F • 13 years ago

d2cf53

Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>

Jan F • 13 years ago

5c8b5c

Mention IPv6 usage in man pages

Jan F • 13 years ago

29b683

Improve init script

Jan F • 13 years ago

d3542d

Improve init script

Jan F • 13 years ago

ef264f

Add possibility to compile openssh without downstream patches

Jan F • 13 years ago

6bd5ca

remove stale control sockets (#706396)

Jan F. Chadima • 13 years ago

6a2cfe

improove entropy manuals

Jan F • 13 years ago

bc60f3

improove entropy handling

Jan F • 13 years ago

0e9135

improove ldap manuals

Jan F • 13 years ago

94df89

improove ldap manuals

Jan F • 13 years ago

ba32c8

add gssapi forced command

Jan F • 13 years ago

5b4ccb

bounce the openssh version

Jan F • 13 years ago

c2c99d

bounce the openssh version

Jan F • 13 years ago

87ae97

temporarily disabling systemd units

Jan F • 13 years ago

c0cd66

add flags AI_V4MAPPED and AI_ADDRCONFIG to getaddrinfo

Jan F • 13 years ago

9c4d06

update scriptlets

Jan F • 13 years ago

6077c7

update scriptlets

Jan F • 13 years ago

2cd304

add systemd units

Jan F • 13 years ago

56091f

add systemd units

Jan F • 13 years ago

0ecc97

add systemd units

Jan F • 13 years ago

d470c4

add systemd units

Jan F • 13 years ago

53f618

the private keys may be 640 root:ssh_keys ssh_keysign is sgid

Jan F • 13 years ago

0e46f2

the private keys may be 640 root:ssh_keys ssh_keysign is sgid

Jan F • 13 years ago

e93cf2

the private keys may be 640 root:ssh_keys ssh_keysign is sgid

Jan F • 13 years ago

e53c59

the private keys may be 640 root:ssh_keys ssh_keysign is sgid

Jan F • 13 years ago

71bf98

the private keys may be 640 root:ssh_keys ssh_keysign is sgid

Jan F • 13 years ago

a8dc50

the private keys may be 640 root:ssh_keys ssh_keysign is sgid

Jan F • 13 years ago

1ddd0e

improving sshd -> passwd transation

Jan F • 13 years ago

c7ffe0

the intermediate context is set to sshd_sftpd_t

Jan F • 13 years ago

e30685

the intermediate context is set to sshd_sftpd_t

Jan F • 13 years ago

439c34

the intermediate context is set to sshd_sftpd_t

Jan F • 13 years ago

8bc65c

resolve warnings in port_linux.c

Jan F • 13 years ago

7317c8

resolve warnings in port_linux.c

Jan F • 13 years ago

7f6509

resolve warnings in port_linux.c

Jan F • 13 years ago

8ecc9b

resolve warnings in port_linux.c

Jan F • 13 years ago

1f6bdc

resolve warnings in port_linux.c

Jan F • 13 years ago

3f220f

resolve warnings in port_linux.c

Jan F • 13 years ago

8a77a1

add /etc/sysconfig/sshd

Jan F • 13 years ago

11896a

improve reseeding and seed source (documentation)

Jan F • 13 years ago

0553df

improve reseeding and seed source (cocumentation)

Jan F • 13 years ago

91d3b3

improve reseeding and seed source (cocumentation)

Jan F • 13 years ago

16e9e6

improve reseeding and seed source (cocumentation)

Jan F • 13 years ago

d32174

improve reseeding and seed source (cocumentation)

Jan F • 13 years ago

e6d33e

use /dev/random or /dev/urandom for seeding prng

Jan F • 13 years ago

39c7b0

use /dev/random or /dev/urandom for seeding prng

Jan F • 13 years ago

3657ad

add periodical reseeding of random generator

Jan F • 13 years ago

0f7ccb

add periodical reseeding of random generator

Jan F • 13 years ago

8fe150

improove ssh-ldap (documentation)

Jan F • 13 years ago

b32f12

improove ssh-ldap (documentation)

Jan F • 13 years ago

f33c99

improove ssh-ldap (documentation)

Jan F • 13 years ago

9992a8

improove ssh-ldap (documentation)

Jan F • 13 years ago

9404cd

improve session keys audit

Jan F • 13 years ago

a864d6

improve session keys audit

Jan F • 13 years ago

ffd063

improve session keys audit

Jan F • 13 years ago

d1fc5c

CVE-2010-4755

Jan F • 13 years ago

71d3d9

improove ssk-keycat (documentation)

Jan F • 13 years ago

3388c0

improove ssk-keycat (documentation)

Jan F • 13 years ago

825921

improve audit of logins and auths

Jan F • 13 years ago

6ab850

improve audit of logins and auths

Jan F • 13 years ago

edc172

improove ssk-keycat

Jan F • 13 years ago

5c5419

improove ssk-keycat

Jan F • 13 years ago

5928f9

improove ssk-keycat

Jan F • 13 years ago

1499a2

add ssk-keycat

Jan F • 13 years ago

04fc86

add ssk-keycat

Jan F • 13 years ago

99f427

reenable auth-keys ldap backend

Jan F • 13 years ago

b93498

another audit improovements

Jan F • 13 years ago

48446f

another audit improovements

Jan F • 13 years ago

aefa65

another audit improovements

Jan F • 13 years ago

f9ff10

another audit improovements

Jan F • 13 years ago

1732b0

another audit improovements

Jan F • 13 years ago

842f43

another audit improovements

Jan F • 13 years ago

c2b009

another audit improovements

Jan F • 13 years ago

9cefae

improve audit of server ket management

Jan F • 13 years ago

0e9e1c

improve audit of server ket management

Jan F • 13 years ago

d9ebda

improve audit of server ket management

Jan F • 13 years ago

2c1a4a

improve audit of logins and auths

Jan F • 13 years ago

b9127e

improve audit of logins and auths

Jan F • 13 years ago

483c73

- bump openssh version to 5.8p1

Jan F • 14 years ago

003cb0

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

Dennis Gilmore • 14 years ago

fa335e

- clean the data structures in the non privileged process

Jan F • 14 years ago

cfb0f3

- clean the data structures when roaming

Jan F • 14 years ago

865391

- clean the data structures in the privileged process

Jan F • 14 years ago

ee23b0

- clean the data structures in the privileged process

Jan F • 14 years ago

f32d86

- clean the data structures in the privileged process

Jan F • 14 years ago

6f9316

- clean the data structures before exit net process

Jan F • 14 years ago

f00e4a

- make audit compatible with the fips mode

Jan F • 14 years ago

af8738

- add audit of destruction the server keys

Jan F • 14 years ago

377ba3

- add audit of destruction the server keys

Jan F • 14 years ago

9828ff

- add audit of destruction the server keys

Jan F • 14 years ago

92eab1

- add audit of destruction the session keys

Jan F • 14 years ago

5c20fa

- reenable run sshd as non root user

Jan F. Chadima • 14 years ago

a7cb7d

- reapair clientloop crash (#627332)

Jan F • 14 years ago

436639

- properly restore euid in case connect to the ssh-agent socket fails

Jan F • 14 years ago

bb5eb0

- striped read permissions from suid and sgid binaries

Jan F. Chadima • 14 years ago

d2ed53

- used upstream version of the biguid patch

Jan F • 14 years ago

7c53d7

- improoved kuserok patch

Jan F • 14 years ago

82036a

- add auditing the host based key ussage

Jan F • 14 years ago

5daee1

- add auditing the kex result

Jan F. Chadima • 14 years ago

848d56

- add auditing the kex result

Jan F. Chadima • 14 years ago

f44bde

- add auditing the key ussage

Jan F • 14 years ago

f8f722

- add auditing the key ussage

Jan F. Chadima • 14 years ago

b7b582

- add auditing the key ussage

Jan F • 14 years ago

0f4c82

- update gsskex patch (#645389)

Jan F • 14 years ago

2d0bc8

- rebase linux audit according to upstream

Jan F • 14 years ago

ba25ec

- add missing headers to linux audit

Jan F. Chadima • 14 years ago

cf74d5

- audit module now uses openssh audit framevork

Jan F • 14 years ago

faae1e

- Add the GSSAPI kuserok switch to the kuserok patch

Jan F • 14 years ago

cae736

- Add the GSSAPI kuserok switch to the kuserok patch

Jan F • 14 years ago

46c77f

- Repaired the kuserok patch

Jan F • 14 years ago

4c4aa1

- Repaired the problem with puting entries with very big uid into lastlog

Jan F • 14 years ago

abe4bc

- Repaired the problem with puting entries with very big uid into lastlog

Jan F • 14 years ago

10c6ac

- Repaired the problem with puting entries with very big uid into lastlog

Jan F • 14 years ago

ce0606

- Merging selabel patch with the upstream version. (#632914)

Jan F • 14 years ago

2bdd02

- Merging selabel patch with the upstream version. (#632914)

Jan F • 14 years ago

84d568

- Tweaking selabel batch to work properly without selinux rules loaded. (#632914)

Jan F • 14 years ago

93909d

- Make fipscheck hmacs compliant with FHS - requires new fipscheck

Tomas Mraz • 14 years ago

13fa78

- Added -z relro -z now to LDFLAGS

Jan F • 14 years ago

f7e15d

- Rebased to openssh5.6p1

Jan F. Chadima • 14 years ago

c6801b

more acurrate source file

Jan F. Chadima • 14 years ago

d675c0

Upgrade to openssh-5.6p1

Jan F. Chadima • 14 years ago

1b8a26

upgrade to openssh-5.6p1

Jan F. Chadima • 14 years ago

98ba34

dist-git conversion

Fedora Release Engineering • 14 years ago

34e1de

- merged with newer bugzilla's version of authorized keys command patch

Jan F. Chadima • 14 years ago

7818e5

- improved the x11 patch according to upstream (#598671)

Jan F. Chadima • 14 years ago

eb358a

- improved the x11 patch (#598671)

Jan F. Chadima • 14 years ago

2664a6

- improved the x11 patch (#598671)

Jan F. Chadima • 14 years ago

a3dee6

- changed _PATH_UNIX_X to unexistent file name (#598671)

Jan F. Chadima • 14 years ago

41a56c

- sftp works in deviceless chroot again (broken from 5.5p1-3)

Jan F. Chadima • 14 years ago

411b91

- add option to switch out krb5_kuserok

Jan F. Chadima • 14 years ago

59d42d

- synchronize uid and gid for the user sshd

Jan F. Chadima • 14 years ago

2fd105

- Typo in ssh-ldap.conf(5) and ssh-ladap-helper(8)

Jan F. Chadima • 14 years ago

b1a625

- Repair the reference in man ssh-ldap-helper(8)

Jan F. Chadima • 14 years ago

99d9a3

- Repair the reference in man ssh-ldap-helper(8)

Jan F. Chadima • 14 years ago

8fc96c

- Make the Ldap configuration widely compatible

Jan F. Chadima • 14 years ago

86b2d1

- Make the Ldap configuration widely compatible

Jan F. Chadima • 14 years ago

222d52

- Make LDAP config elements TLS_CACERT and TLS_REQCERT compatiple with

Jan F. Chadima • 14 years ago

4669c3

- Make LDAP config element tls_checkpeer compatiple with nss_ldap (#589360)

Jan F. Chadima • 14 years ago

b6bdf1

- Comment spec.file

Jan F. Chadima • 14 years ago

bd929b

- Comment spec.file

Jan F. Chadima • 14 years ago

6fa4d8

Remove unnecessary files

Jan F. Chadima • 14 years ago

395eb1

- Create separate ldap package

Jan F. Chadima • 14 years ago

3fdf10

- Added LDAP support

Jan F. Chadima • 14 years ago

7e7fb4

- Ignore .bashrc output to stderr in the subsystems

Jan F. Chadima • 14 years ago

fdb7c9

- Ignore .bashrc output to stderr in the subsystems

Jan F. Chadima • 14 years ago

2220e6

- Drop dependency on man

Jan F. Chadima • 14 years ago

9e777a

- Update to 5.5p1

Jan F. Chadima • 14 years ago

82bc82

- repair configure script of pam_ssh_agent

Jan F. Chadima • 14 years ago

e18b11

- repair configure script of pam_ssh_agent

Jan F. Chadima • 14 years ago

b82340

- repair configure script of pam_ssh_agent

Jan F. Chadima • 14 years ago

50a3dd

source krb5-devel profile script only if exists

Jan F. Chadima • 14 years ago

264029

Update to 5.4p1

Jan F. Chadima • 14 years ago

04cab1

Update to 5.4p1

Jan F. Chadima • 14 years ago

ef5d19

Update to 5.4p1

Jan F. Chadima • 14 years ago

42225a

Update to 5.4p1

Jan F. Chadima • 14 years ago

d1a73d

Prepare update to 5.4p1

Jan F. Chadima • 14 years ago

974c89

Prepare update to 5.4p1

Jan F. Chadima • 14 years ago

530506

ImplicitDSOLinking

Jan F. Chadima • 15 years ago

806a11

Allow to use hardware crypto if awailable

Jan F. Chadima • 15 years ago

a2a0cf

optimized FD_CLOEXEC on accept socket

Jan F. Chadima • 15 years ago

606b55

- updated pam_ssh_agent_auth to new version from upstream (just a licence

Tomáš Mráz • 15 years ago

745155

optimized RAND_cleanup patch

Jan F. Chadima • 15 years ago

e39eb5

add RAND_cleanup at the exit of each program using RAND

Jan F. Chadima • 15 years ago

28355b

set FD_CLOEXEC on accepted socket

Jan F. Chadima • 15 years ago

313100

s/define/global/ in macros

Jan F. Chadima • 15 years ago

37c0ae

s/define/global/ in macros

Jan F. Chadima • 15 years ago

b8bdc7

Update the pka patch

Jan F. Chadima • 15 years ago

9051e5

cleanup

Jan F. Chadima • 15 years ago

ebcd8e

Update the audit patch

Jan F. Chadima • 15 years ago

ecd50f

Add possibility to autocreate only RSA key into initscript

Jan F. Chadima • 15 years ago

c32d4a

Prepare NSS key patch for future SEC_ERROR_LOCKED_PASSWORD

Jan F. Chadima • 15 years ago

6323f6

Fix typo that causes a failure to update the common directory. (releng

Bill Nottingham • 15 years ago

776bac

Update NSS key patch

Jan F. Chadima • 15 years ago

0a6423

Add gssapi key exchange patch

Jan F. Chadima • 15 years ago

3d742c

Add public key agent patch

Jan F. Chadima • 15 years ago

201f4a

Repair canohost patch to allow gssapi to work when host is acessed via pipe

Jan F. Chadima • 15 years ago

d2767e

Modify the init script to prevent it to hang during generating the keys

Jan F. Chadima • 15 years ago

5fb555

Add README.nss

Jan F. Chadima • 15 years ago

838d93

- Add pam_ssh_agent_auth module to a subpackage.

Tomáš Mráz • 15 years ago

e47cb0

Renable audit.

Jan F. Chadima • 15 years ago

2ed3f9

Upgrade to new wersion 5.3p1

Jan F. Chadima • 15 years ago

c54a8b

Upgrade to new wersion 5.3p1

Jan F. Chadima • 15 years ago

35695c

Resolve locking in ssh-add

Jan F. Chadima • 15 years ago

71e874

Repair initscript to be acord to guidelines

Jan F. Chadima • 15 years ago

f013be

Repair initscript to be acord to guidelines

Jan F. Chadima • 15 years ago

cee78e

Changed pam stack to password-auth

Jan F. Chadima • 15 years ago

4330e6

Dropped homechroot path

Jan F. Chadima • 15 years ago

3d51c7

Dropped homechrot patch

Jan F. Chadima • 15 years ago

0447c9

Add check for nosuid, nodev in homechroot

Jan F. Chadima • 15 years ago

257d66

add correct patch for ip-opts

Jan F. Chadima • 15 years ago

49d0cf

replace ip-opts patch by an upstream candidate version

Jan F. Chadima • 15 years ago

bd8eb9

Upstream convergence

Jan F. Chadima • 15 years ago

ce94da

Upstream convergence

Jan F. Chadima • 15 years ago

726565

rearange sesftp patch acording to upstream request

Jan F. Chadima • 15 years ago

56bb42

rearange patches

Jan F. Chadima • 15 years ago

15914f

minor change in sesftp patch

Jan F. Chadima • 15 years ago

214b7b

Minor repair of sesftp patch

Jan F. Chadima • 15 years ago

170a77

- rebuilt with new openssl

Tomáš Mráz • 15 years ago

80bcb1

Added dnssec support.

Jan F. Chadima • 15 years ago

986cee

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

Jesse Keating • 15 years ago

42c539

only INTERNAL_SFTP can be home-chrooted save _u and _r parts of context

Jan F. Chadima • 15 years ago

aa8983

changed internal-sftp context to sftpd_t

Jan F. Chadima • 15 years ago

a827fe

changed internal-sftp context to sftpd_t

Jan F. Chadima • 15 years ago

f35d4a

changed internal-sftp context to sftpd_t

Jan F. Chadima • 15 years ago

3d6b00

create '~/.ssh/known_hosts' within proper context

Jan F. Chadima • 15 years ago

ca05b3

length of home path in ssh now limited by PATH_MAX

Jan F. Chadima • 15 years ago

f4b0b4

final version chroot %%h (sftp only)

Jan F. Chadima • 15 years ago

eca05f

repair broken ls in chroot %%h

Jan F. Chadima • 15 years ago

c1398b

add XMODIFIERS to exported environment

Jan F. Chadima • 15 years ago

ecd846

add XMODIFIERS to exported environment

Jan F. Chadima • 15 years ago

534112

add XMODIFIERS to exported environment

Jan F. Chadima • 15 years ago

e45f2c

- allow only protocol 2 in the FIPS mode

Tomáš Mráz • 15 years ago

76f329

- do integrity verification only on binaries which are part of the OpenSSH

Tomáš Mráz • 15 years ago

685b62

- log if FIPS mode is initialized

Tomáš Mráz • 15 years ago

0a4fa5

*** empty log message ***

Jan F. Chadima • 15 years ago

3a94ae

- fix logging after chroot

Jan F. Chadima • 15 years ago

061e21

- add AES-CTR ciphers to the FIPS mode proposal

Tomáš Mráz • 15 years ago

0f07b4

Upgrade to version 5.2p1

Jan F. Chadima • 15 years ago

adad2a

Upgrade to version 5.2p1

Jan F. Chadima • 15 years ago

48bd44

Upgrade na version 5.2p1

Jan F. Chadima • 15 years ago

194f64

bounce openssh to version 5.2p1

Jan F. Chadima • 15 years ago

ed9a89

Bounce openssh to version 5.2p1

Jan F. Chadima • 15 years ago

a3ba41

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

Jesse Keating • 15 years ago

c5f25a

- drop obsolete triggers

Tomáš Mráz • 16 years ago

d93958

- enable use of ssl engines (#481100)

Tomáš Mráz • 16 years ago

ff6d59

- remove obsolete --with-rsh (#478298)

Tomáš Mráz • 16 years ago

6a5e29

- set FD_CLOEXEC on channel sockets (#475866)

Tomáš Mráz • 16 years ago

9e5c6e

- fix compatibility with some servers (#466818)

Tomáš Mráz • 16 years ago

b9a07a

- fixed zero length banner problem (#457326)

Tomáš Mráz • 16 years ago

578f0d

- rediff for no fuzz

Tomáš Mráz • 16 years ago

ec5276

- rediff for zero fuzz tolerance

Tomáš Mráz • 16 years ago

09510a

- upgrade to new upstream release

Tomáš Mráz • 16 years ago

93a474

- pass the connection socket to ssh-keysign (#447680)

Tomáš Mráz • 16 years ago

077dad

- add LANGUAGE to accepted/sent environment variables (#443231)

Tomáš Mráz • 16 years ago

1961bc

- upgrade to new upstream (#441066)

Tomáš Mráz • 16 years ago

ca47f6

- set FD_CLOEXEC on client socket

Tomáš Mráz • 16 years ago

2cb0e7

we build sparc32 sparcv9 by default now it needed adding to the -fPIE list

Dennis Gilmore • 17 years ago

91bdf4

- fix gssapi auth with explicit selinux role requested (#427303) - patch by

Tomáš Mráz • 17 years ago

993dd1

- explicitly source krb5-devel profile script

Tomáš Mráz • 17 years ago

3457e3

- explicitly source krb5-devel profile script

Tomáš Mráz • 17 years ago

2cc09c

- Rebuild for openssl bump

Jesse Keating • 17 years ago

9eac42

- localtime in chroot no longer needed

Tomáš Mráz • 17 years ago

320a1c

- must require ncurses-devel for libedit

Tomáš Mráz • 17 years ago

0a9a40

- version bump

Tomáš Mráz • 17 years ago

b1ffa0

- do not copy /etc/localtime into the chroot as it is not necessary anymore

Tomáš Mráz • 17 years ago

8b8c4d

makefile update to properly grab makefile.common

Bill Nottingham • 17 years ago

5d613b

- revert default window size adjustments (#286181)

Tomáš Mráz • 17 years ago

95be08

- upgrade to latest upstream

Tomáš Mráz • 17 years ago

c9833c

- fix sftp client problems on write error (#247802)

Tomáš Mráz • 17 years ago

f37073

- oops committed testing only change

Tomáš Mráz • 17 years ago

fc2f31

- add buildrequires nss-devel to build with the nss-keys patch

Tomáš Mráz • 17 years ago

0092bb

- experimental NSS keys support

Tomáš Mráz • 17 years ago

c3274c

- mls level check must be done with default role same as requested

Tomáš Mráz • 17 years ago

7210c0

- make profile.d/gnome-ssh-askpass.* regular files (#226218)

Tomáš Mráz • 17 years ago

b40baa

- reject connection if requested mls range is not obtained (#229278)

Tomáš Mráz • 17 years ago

546fdd

- improve Buildroot

Tomáš Mráz • 17 years ago

9d725b

- fix some forward porting typos

Tomáš Mráz • 18 years ago

73a855

- support mls on labeled networks (#220487)

Tomáš Mráz • 18 years ago

c2b35d

- buildrequire tcp_wrappers-devel

Tomáš Mráz • 18 years ago

45f17d

- update to 4.5p1 (#212606)

Tomáš Mráz • 18 years ago

ad07b9

- fix gssapi with DNS loadbalanced clusters (#216857)

Tomáš Mráz • 18 years ago

914284

- improved pam_session patch so it doesn't regress, the patch is necessary

Tomáš Mráz • 18 years ago

d63dc6

- CVE-2006-5794 - properly detect failed key verify in monitor (#214641)

Tomáš Mráz • 18 years ago

ad61b1

- merge sshd initscript patches

Tomáš Mráz • 18 years ago

19675a

- improve gssapi-no-spnego patch (#208102)

Tomáš Mráz • 18 years ago

7114c4

- don't report duplicate syslog messages, use correct local time (#189158)

Tomáš Mráz • 18 years ago

ac4818

- drop the pam-session patch from the previous build (#201341)

Tomáš Mráz • 18 years ago

c12d6b

- dropped old ssh obsoletes

Tomáš Mráz • 18 years ago

762e40

- improve selinux patch (by Jan Kiszka)

Tomáš Mráz • 18 years ago

ef3242

bumped for rebuild

Jesse Keating • 18 years ago

d446e9

- don't request pseudoterminal allocation if stdin is not tty (#188983)

Tomáš Mráz • 18 years ago

7e1c55

- allow access if audit is not compiled in kernel (#183243)

Tomáš Mráz • 18 years ago

5f29ac

- enable the subprocess in chroot to send messages to system log

Tomáš Mráz • 18 years ago

e01ed6

- print error from scp if not remote (patch by Bjorn Augustsson #178923)

Tomáš Mráz • 18 years ago

b5e849

- new version

Tomáš Mráz • 19 years ago

f16d34

bump for bug in double-long on ppc(64)

Jesse Keating • 19 years ago

3de0ff

- fixed another place where syslog was called in signal handler

Tomáš Mráz • 19 years ago

f223eb

- new version, dropped obsolete patches

Tomáš Mráz • 19 years ago

fd638a

- get rid of the .1 in release

Tomáš Mráz • 19 years ago

6b14a0

- hopefully make the askpass dialog less confusing (#174765)

Tomáš Mráz • 19 years ago

bb93ea

gcc update bump

Jesse Keating • 19 years ago

6e3ae4

- drop x11-ssh-askpass from the package

Tomáš Mráz • 19 years ago

09d7e6

remove now-obsolete builddep on xauth

Nalin Dahyabhai • 19 years ago

db2565

actually bump the release number

Nalin Dahyabhai • 19 years ago

3ef0dd

- work around gccmakedep not being there by fooling the build machinery

Nalin Dahyabhai • 19 years ago

05c945

- buildreq audit-libs-devel

Warren Togami • 19 years ago

0e5862

- xorg-x11-devel -> libXt-devel

Warren Togami • 19 years ago

19e22a

rebuild to pick up new xauth location so X forwarding works

Warren Togami • 19 years ago

d40b8c

xfree86-devel is gone

Jeremy Katz • 19 years ago

c799b3

- rebuild against new openssl

Jeremy Katz • 19 years ago

35e1e0

- put back the possibility to skip SELinux patch

Tomáš Mráz • 19 years ago

fc72c2

Update selinux patch to use rolelevel call

Daniel J Walsh • 19 years ago

531256

- Update selinux patch to use getseuserbyname

Daniel J Walsh • 19 years ago

0e07ed

- typo

Tomáš Mráz • 19 years ago

092218

- use include instead of pam_stack in pam config

Tomáš Mráz • 19 years ago

896122

- use include instead of pam_stack in pam config

Tomáš Mráz • 19 years ago

5bab48

- upgrade to a new upstream version

Tomáš Mráz • 19 years ago

de2e7a

- use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)

Tomáš Mráz • 19 years ago

f94d8f

- don't deadlock on exit with multiple X forwarded channels (#152432)

Tomáš Mráz • 19 years ago

fa1481

- fix small regression caused by the nologin patch (#161956)

Tomáš Mráz • 19 years ago

79c968

- release up

Tomáš Mráz • 19 years ago

855257

- use only pam_nologin for nologin testing

Tomáš Mráz • 19 years ago

9ac1c8

- upgrade to a new upstream version

Tomáš Mráz • 19 years ago

9cf4ab

- link libselinux only to sshd (#157678)

Tomáš Mráz • 19 years ago

9c5771

- fixed Local/RemoteForward in ssh_config.5 manpage

Tomáš Mráz • 19 years ago

1e27c0

- upgrade to 4.0p1

Tomáš Mráz • 19 years ago

5de53f

sync

Elliot Lee • 19 years ago

683f4f

rebuild so that configure can detect that krb5_init_ets is gone now

Nalin Dahyabhai • 19 years ago

4f9d64

- allow password authentication when copying from remote to remote machine

Tomáš Mráz • 19 years ago

8d62bf

- don't call syslog in signal handler

Tomáš Mráz • 19 years ago

d048f9

s/RedHat 7.2/Red Hat Linux 7.2/

Nalin Dahyabhai • 20 years ago

389c43

- add spaces to messages in initscript (#138508)

Tomáš Mráz • 20 years ago

504978

- enable trusted forwarding by default if X11 forwarding is required by

Tomáš Mráz • 20 years ago

4c55a5

- change permissions on pam.d/sshd to 0644

Tomáš Mráz • 20 years ago

5a8f6b

- remove mitm backward-compatibility patch for 3.8, clean up a reject hunk

Nalin Dahyabhai • 20 years ago

fe4250

don't use initlog

Bill Nottingham • 20 years ago

ede9e0

[tw] - fixed PIE build for all architectures

Thomas Woerner • 20 years ago

b56212

document ACSS removal a bit better

Colin Walters • 20 years ago

74ed23

- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel

Nalin Dahyabhai • 20 years ago

8ccaa9

don't buildprereq gnome-libs

Bill Nottingham • 20 years ago

c92dff

bump release for build

Nalin Dahyabhai • 20 years ago

567e63

- switch to a modified tarball, as we did for OpenSSL, for removing ACSS

Nalin Dahyabhai • 20 years ago

deb1e4

use get_default_context_with_role

Daniel J Walsh • 20 years ago

c82df7

auto-import changelog data from openssh-3.9p1-3.src.rpm

cvsdist • 20 years ago

29a4bf

auto-import changelog data from openssh-3.9p1-2.src.rpm

cvsdist • 20 years ago

d7affc

auto-import changelog data from openssh-3.9p1-1.src.rpm

cvsdist • 20 years ago

653818

auto-import changelog data from openssh-3.8.1p1-5.src.rpm

cvsdist • 20 years ago

5ef607

auto-import openssh-3.8.1p1-4 from openssh-3.8.1p1-4.src.rpm

cvsdist • 20 years ago

9d5a53

auto-import changelog data from openssh-3.8.1p1-3.src.rpm

cvsdist • 20 years ago

de28cc

auto-import changelog data from openssh-3.8.1p1-2.src.rpm

cvsdist • 20 years ago

e965c7

auto-import changelog data from openssh-3.8.1p1-1.src.rpm

cvsdist • 20 years ago

ffdec5

auto-import changelog data from openssh-3.6.1p2-36.src.rpm

cvsdist • 20 years ago

162c7f

auto-import changelog data from openssh-3.6.1p2-35.src.rpm

cvsdist • 20 years ago

73e10e

auto-import changelog data from openssh-3.6.1p2-34.src.rpm

cvsdist • 20 years ago

8f8720

auto-import changelog data from openssh-3.6.1p2-27.src.rpm

cvsdist • 20 years ago

fe98d8

auto-import openssh-3.6.1p2-19 from openssh-3.6.1p2-19.src.rpm

cvsdist • 20 years ago

092b0a

auto-import changelog data from openssh-3.5p1-11.src.rpm

cvsdist • 20 years ago

903730

auto-import openssh-3.5p1-10 from openssh-3.5p1-10.src.rpm

cvsdist • 20 years ago

44a5d2

auto-import openssh-3.5p1-9 from openssh-3.5p1-9.src.rpm

cvsdist • 20 years ago

6eaa41

auto-import openssh-3.5p1-6.9 from openssh-3.5p1-6.9.src.rpm

cvsdist • 20 years ago

6c4a0b

auto-import openssh-3.5p1-6 from openssh-3.5p1-6.src.rpm

cvsdist • 20 years ago

3e66bd

auto-import openssh-3.4p1-5 from openssh-3.4p1-5.src.rpm

cvsdist • 20 years ago

818000

auto-import openssh-3.4p1-2 from openssh-3.4p1-2.src.rpm

cvsdist • 20 years ago

e98831

auto-import openssh-3.4p1-1 from openssh-3.4p1-1.src.rpm

cvsdist • 20 years ago

8264e7

auto-import changelog data from openssh-3.1p1-10.src.rpm

cvsdist • 20 years ago

7c1cbd

auto-import openssh-3.1p1-6 from openssh-3.1p1-6.src.rpm

cvsdist • 20 years ago

a423ec

auto-import openssh-3.1p1-3 from openssh-3.1p1-3.src.rpm

cvsdist • 20 years ago

0c1105

auto-import changelog data from openssh-3.1p1-2s.1.src.rpm

cvsdist • 20 years ago

8f631f

auto-import changelog data from openssh-3.1p1-2.src.rpm

cvsdist • 20 years ago

b46e39

auto-import changelog data from openssh-2.9p2-12.src.rpm

cvsdist • 20 years ago

d92638

auto-import changelog data from openssh-2.9p2-11.src.rpm

cvsdist • 20 years ago

55bc91

auto-import changelog data from openssh-2.9p2-9.src.rpm

cvsdist • 20 years ago

9383d5

auto-import changelog data from openssh-2.9p2-7.src.rpm

cvsdist • 20 years ago

fcc300

auto-import changelog data from openssh-2.9p2-6.src.rpm

cvsdist • 20 years ago

35482e

auto-import changelog data from openssh-2.9p2-5.src.rpm

cvsdist • 20 years ago

628f20

auto-import changelog data from openssh-2.9p2-4.src.rpm

cvsdist • 20 years ago

7d7b03

auto-import changelog data from openssh-2.5.2p2-5.src.rpm

cvsdist • 20 years ago

4135ab

auto-import changelog data from openssh-2.5.2p2-1.7.2.src.rpm

cvsdist • 20 years ago

43f95f

auto-import changelog data from openssh-2.3.0p1-4.src.rpm

cvsdist • 20 years ago

f28bf6

auto-import changelog data from openssh-2.2.0p1-5.src.rpm

cvsdist • 20 years ago

328740

auto-import changelog data from openssh-2.1.1p4-1.src.rpm

cvsdist • 20 years ago

f71077

rpms / openssh

Commits 1233

rpms / openssh

Source Code

Commits 1233